Privacy policy

Data about you as a customer

We collect your name, email address, billing details and the metadata of your API usage — which endpoints you called, when, what they cost and whether they succeeded. We need that last set to bill you accurately and to answer "why was I charged for this?", which is why the request log is visible to you in full.

We do not store the bodies of the responses we return to you. Once a response is delivered it exists in your systems, not ours.

Data you retrieve through the API

For personal data returned by the API, you are the controller and we act as a processor on your instructions. Our acceptable use policy sets out your obligations, including establishing a lawful basis and honouring deletion requests.

Individuals can ask us to suppress their data from future responses; see the acceptable use policy for how.

Sharing, retention and your rights

We share customer data with our payment processor, our email provider and our hosting provider, and with nobody else. We do not sell customer data and we do not use it to train models.

Account data is kept while your account is open and for seven years afterwards where tax law requires it. Request logs are kept for two years. You can access, correct, export or delete your data by emailing us, and you can complain to your supervisory authority if you are unhappy with how we respond.