Legal
Privacy Policy
Last updated: 2026-08-08
1. What we collect
Account data (email, name, password hash), API usage metadata (endpoint, status, timestamps, IP address), and billing records needed to operate the service.
2. What we do not collect
We do not store raw API keys — only SHA-256 hashes. We do not sell your personal data.
3. How we use data
To operate and secure the platform, enforce quotas and rate limits, send transactional email, and maintain audit logs for security.
4. Third parties
We use infrastructure and service providers (hosting, email, payments, bot protection) that process data on our behalf under their own terms. Upstream tool providers receive only the requests required to serve the call.
5. Retention
Account data is retained while your account is active. Raw usage logs are pruned after a retention window; monthly aggregates are kept for billing and analytics.
6. Your rights
You may request access, correction, or deletion of your personal data by contacting us. Deletion may remove access to services that require an account.
7. Security
Traffic is encrypted in transit, secrets are stored as hashes or in environment-managed secret stores, and sensitive admin actions are audited.
8. Contact
Privacy questions: [email protected].