Legal

Privacy Policy

Last updated: 2026-08-08

1. What we collect

Account data (email, name, password hash), API usage metadata (endpoint, status, timestamps, IP address), and billing records needed to operate the service.

2. What we do not collect

We do not store raw API keys — only SHA-256 hashes. We do not sell your personal data.

3. How we use data

To operate and secure the platform, enforce quotas and rate limits, send transactional email, and maintain audit logs for security.

4. Third parties

We use infrastructure and service providers (hosting, email, payments, bot protection) that process data on our behalf under their own terms. Upstream tool providers receive only the requests required to serve the call.

5. Retention

Account data is retained while your account is active. Raw usage logs are pruned after a retention window; monthly aggregates are kept for billing and analytics.

6. Your rights

You may request access, correction, or deletion of your personal data by contacting us. Deletion may remove access to services that require an account.

7. Security

Traffic is encrypted in transit, secrets are stored as hashes or in environment-managed secret stores, and sensitive admin actions are audited.

8. Contact

Privacy questions: [email protected].