Privacy Policy

1. Controller

Privacy questions and requests: [email protected]

2. What we process and why

• Account data — e-mail address, password hash, optional two-factor settings and linked sign-in providers. Purpose: providing the Service (contract).
• Usage data — API requests per key, endpoint and time, used for quotas, usage charts and abuse prevention (contract, legitimate interest).
• Billing data — plan, payments and invoices. Card details are collected and stored by Stripe, never by us (contract, legal obligation).
• Security logs — sign-in events and administrative actions (legitimate interest in securing the Service).
• Communication — service e-mails such as verification, password reset and quota notices (contract).

3. Processors and recipients

• Stripe Payments Europe, Ltd. — payment processing and invoicing.
• Our hosting and e-mail delivery providers — infrastructure, under data processing agreements.
• Google or GitHub — only if you choose to sign in with them.

Where data is transferred outside the EEA, it is protected by Standard Contractual Clauses or an adequacy decision.

4. Retention

Account data is kept while your account exists. Billing records are kept for the period required by Czech accounting and tax law (up to 10 years). Usage and security logs are kept only as long as needed for their purpose.

5. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. You can also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz).

6. Cookies

We use no advertising or analytics cookies. See the Cookie Policy for details.