🔒 PRIVACY POLICY
1. WHAT WE PROCESS, IN-MEMORY ONLY
Each of the 12 API endpoints processes the request payload you send it (a piece of text, a JSON object, a phone number, an image, a CSV file, a URL, etc.) in-memory, for the sole purpose of returning the transformed result — a masked log line, a verified checksum, a stripped image, a deduplicated CSV. We do not write the content of your request payloads to a database, log file, or backup.
2. WHAT WE DO KEEP
To operate the subscription and prevent abuse, we keep minimal operational data: your email address and license key (to authenticate requests and send support/billing communication), Paddle subscription and payment status (Paddle itself handles and stores your card details as our Merchant of Record — we never see full card numbers), and basic request metadata (timestamp, endpoint called, response status) for rate-limiting and debugging, kept only as long as needed for that purpose.
3. THIRD-PARTY PROCESSORS
We use Paddle as our Merchant of Record for payment processing, subscription billing, and tax/VAT compliance, and Umami for privacy-respecting, cookie-free website analytics (page views only, no cross-site tracking). Neither processor receives the content of your API request payloads.
4. NO SALE OF DATA
We do not sell, rent, or share your data with advertisers or data brokers. We do not use the content you send to our endpoints to train models, build profiles, or for any purpose other than returning your API response.
5. YOUR REQUESTS & DATA SUBJECT RIGHTS
You are responsible for having a lawful basis to send any personal data through our endpoints (for example, PII you are masking on behalf of your own users). You can request access to, correction of, or deletion of the account data we hold (email, license key, billing status) at any time by writing to support@blackbox-apis.com.
6. CHANGES TO THIS POLICY
We may update this policy to reflect technical, legal, or operational changes. The effective date above reflects the version currently in force.