StepFun
GDPR Compliance
Data Handling
StepFun's privacy policy states that personal information collected and generated during domestic operations is stored within the People's Republic of China and that it currently does not transfer such information overseas. No EU region or EU-only processing option was found in the provider's primary-source platform documentation.
The privacy policy says personal information is kept only for the period necessary to provide platform services. It gives the example that a registered phone number is retained while needed to provide service, handle inquiries/complaints, and protect account/system security; after account deletion, user-initiated deletion, or expiry of the necessary period, data is deleted or anonymized unless law requires retention or a longer period is reasonably needed for finance, audit, or dispute resolution.
The privacy policy states that user inputs and service outputs are collected to provide intelligent dialogue/content generation, content understanding, and data analysis. It also states that information generated from use of the platform may be anonymized and then used for data analysis and possible commercial use.
Certifications & EU AI Act
No certifications disclosed.
Verification
Primary-source documentation confirms a China-based provider with data stored in the PRC and no published EU region or EU-only processing option. No public DPA/AVV, sub-processor list, SCC statement, training-on-customer-data statement, or security certification evidence was found in StepFun's primary-source materials reviewed on 2026-04-11.
Models (1)
| Model | Modality | Context | Input | Output |
|---|---|---|---|---|
StepFun: Step 3.5 Flash stepfun/step-3.5-flash | text | 262K | $0.100 | $0.300 |