Legal

Privacy Policy

Effective date: September 4, 2026

1. Information We Collect

When you create an account, we collect your email address and the name you provide. If you sign in with Google, we receive your email, name, and profile photo from your Google account. We also record which API keys you create and usage data such as the number of requests, endpoints called, and timestamps.

2. How We Use Your Information

We use your information to operate your account, authenticate API requests, measure and display usage, enforce quotas and rate limits, keep the service secure, and communicate with you about your account. We do not sell your personal information.

3. Authentication and Sessions

We use authentication cookies and tokens to keep you signed in and to identify requests to the API. Auth tokens confirm a valid key before each API call and are stored only in hashed form — plaintext API keys are never stored on our servers.

4. Third-Party Services

We rely on trusted third-party providers to run the service, including Supabase for authentication and database hosting, and Vercel for application hosting. These providers process data on our behalf under their respective security and compliance commitments.

5. Data Retention

We keep your account details and API key records for as long as your account is active. Usage logs are kept for a reasonable period to support billing and abuse prevention. If you delete your account, your profile and API keys are removed.

6. Security

We protect data in transit with HTTPS, store passwords through industry-standard authentication systems, and never store plaintext API keys. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

You can review and update your profile in the account page, create or delete API keys, and delete your account at any time. Depending on your jurisdiction, you may also have rights to access, correct, export, or erase your personal information — contact us to exercise these rights.

8. Children's Privacy

The service is intended for developers and businesses and is not directed to children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Your continued use of the service after changes take effect constitutes acceptance of the revised policy.