Privacy policy

Draft. This text has not been reviewed by a lawyer yet. It will change before launch.

What we collect

When you create an account we store your e-mail address and a password hash (managed by our sign-in provider), and the name and company you choose to enter. We also keep your API key names and settings, your webhook addresses, your notification choices and a short history of account changes. For each key we keep usage counts per day. We do not store the secret of an API key, only a fingerprint of it.

What we do not collect

We do not track you across other sites, we do not sell personal data, and we do not store the content of your API requests. Our server logs do not include your e-mail address or name.

Why we use it

To run your account, to meter requests against your plan, to send the e-mails you ask for (release notes, usage alerts) and to keep the service secure.

Who processes it

Sign-in and account e-mails run on Supabase. The website runs on Vercel and the API on our own hosting. They process data only to provide the service.

How long we keep it

We keep account data while your account exists. When you delete your account we delete your profile, keys, usage counts, webhooks, notification settings and account history, and we remove your sign-in record.

Your choices

You can edit your profile, download your data and delete your account at any time in Settings. You can turn off every optional e-mail in Notifications.

Contact

Contact details will be added before launch.