The short version
- We never see, store, or have access to your credit card number, CVV, or full payment details.
- All payments are processed directly by Dodo Payments — a trusted, secure payment processor.
- We only store a billing record ID returned by Dodo Payments — not your card or account data.
- We do not sell, rent, or trade your personal information to anyone.
1. Information We Collect
We collect only what is necessary to operate the Services:
- Account information — username, email address, and hashed password (plain-text passwords are never stored).
- Usage & API data — API key activity, request counts, timestamps, IP address, and user-agent string for security and rate-limit enforcement.
- Billing metadata — subscription plan, billing date, and a Dodo-generated billing record ID. We do not store card numbers, CVV codes, expiry dates, or any raw payment instrument data.
- Support communications — messages or feedback you voluntarily send us.
- Technical data — browser type, device information, and error logs for debugging.
We do not collect or have access to your credit card number, CVV, bank account details, or any sensitive payment instrument. These are handled directly by Dodo Payments' secure checkout flow and never transmitted to our servers.
2. Payment Processing — Powered by Dodo Payments
All subscription payments are processed by Dodo Payments — a globally trusted and secure payment platform.
- Payments are handled through Dodo Payments' secure checkout flow. We never receive your processor credentials, linked bank account, or full card details.
- We receive only a non-sensitive billing record ID confirming your transaction was completed.
- For details on how Dodo Payments handles your data, review Dodo Payments' published privacy policy.
- Subscriptions renew automatically unless you disable auto-renewal in your billing settings.
3. How We Use Information
- Provide, operate, and maintain the Services.
- Authenticate users and secure accounts and API keys.
- Monitor usage, enforce rate limits, and prevent abuse and fraud.
- Track active subscriptions and billing history.
- Respond to support inquiries.
- Improve reliability, performance, and product experience.
- Comply with legal obligations and enforce our Terms of Service.
4. What We Do Not Do
- We never sell, rent, or trade your personal data to third parties.
- We never store credit card numbers, CVV codes, or full payment card data.
- We never send unsolicited marketing emails.
- We never share your data with advertisers.
5. Legal Bases (Where Applicable)
- Performance of a contract (providing Services you request).
- Legitimate interests (security, analytics, product improvements).
- Legal compliance obligations.
- Consent, where required by applicable law.
6. Cookies and Analytics
We use cookies and similar technologies for the following purposes:
- Authentication & session management — to keep you signed in securely.
- Preferences — to remember your language and theme settings.
- Analytics — we use Google Analytics to understand aggregate usage patterns. Data is anonymised and does not include personal API activity. You can opt out via the Google Analytics Opt-out Browser Add-on.
We do not use third-party advertising or tracking cookies.
7. Data Sharing
We do not sell personal data. We may share limited information only with:
- Dodo Payments — for payment processing (see Section 2).
- Google Analytics — aggregated, anonymised site usage data (see Section 6).
- Infrastructure providers — for hosting and operating the API platform, under strict confidentiality agreements.
- Law enforcement or regulators — only when legally required.
8. Data Retention
We retain account and usage data for as long as your account is active and for up to 12 months afterward for legal, audit, and dispute-resolution purposes. API usage logs are retained for up to 90 days. You may request deletion at any time — see Section 14.
9. Security
We implement industry-standard safeguards including encrypted connections (TLS), hashed credential storage, and access controls. Payments are processed through Dodo Payments' secure checkout infrastructure — no payment credentials ever reach our servers. No system is 100% secure, and we cannot guarantee absolute security.
10. International Transfers
Your information may be processed in countries other than your own. Where required by law, we apply appropriate safeguards for cross-border data transfers.
11. Your Rights
Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data. Contact us via the contact page to submit a request — we respond within 30 days.
12. Children's Privacy
Our Services are not directed to children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Services after any change constitutes acceptance of the new policy.
