Privacy Policy

Last updated: July 23, 2026

1. Information We Collect

When you create an account, we collect the following information:

• Account information: Your name, email address, and hashed password.
• API usage data: Timestamps, endpoint paths, HTTP status codes, and approximate request volume. We do not log the contents of API request bodies or response payloads beyond metadata.
• Payment data: Payment processing is handled by Stripe. We do not store full credit card numbers on our servers.
• Technical data: IP address, browser user-agent string, and referring URL for basic analytics and security monitoring.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process payments and manage subscriptions.
• Monitor and analyze usage trends to improve performance and reliability.
• Detect, prevent, and address abuse, fraud, or security incidents.
• Communicate with you about service updates, billing, and support inquiries.
• Comply with legal obligations.

3. Data Sharing

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service providers: With trusted third-party service providers who assist us in operating the Service (e.g., hosting infrastructure, payment processing, email delivery). These providers are contractually bound to protect your data.
• Legal requirements: When required by law, court order, or government request.
• Business transfers: In connection with a merger, acquisition, or sale of all or substantially all of our assets.

4. Payment Processing

All payment transactions are processed by Stripe. Payment card details are transmitted directly to the payment processor and are not stored on ItemAPI servers. We retain only a record of your subscription status and last four digits of your payment method for reference.

5. API Logging

We maintain logs of API requests for operational and security purposes. These logs include:

• API key identifier (not the full key).
• Endpoint called.
• Timestamp and HTTP status code.
• Approximate response size.

API request logs are retained for 90 days and are used solely for monitoring, troubleshooting, and abuse prevention.

6. Data Retention

We retain your account information for as long as your account is active. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your personal data.
• Object to or restrict processing of your personal data.
• Request portability of your data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at admin@itemapi.app.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), hashed password storage, and access controls on production systems.

9. International Data Transfers

Your data may be processed in the United States. By using the Service, you consent to such processing. We will take steps to ensure adequate protection of your data in accordance with applicable laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at admin@itemapi.app.