Privacy Policy

This Privacy Policy explains what data Rate-API collects, why, and how we handle it.

1. Data we collect

Account data - your name and email when you register, and how you reached us (the platform you signed up from, the referring website, and the country inferred from your connection).

Usage data - each API request is logged with the endpoint called, the query parameters sent, the response status, the time, the API key used, your server's IP address, the country inferred from it, and the referring website or origin where one is sent. We use this to enforce quotas, prevent abuse, support you, and show you analytics in your dashboard. Detailed logs are kept for around 90 days (see Retention) and then aggregated into daily totals.

Billing data - handled by our payment provider; we do not store card numbers.

2. How we use data

To provide and secure the Service, enforce plan limits, send transactional email (password resets, receipts, important notices), and improve the product. We do not sell your personal data.

3. Cookies

We use essential cookies for sign-in and security. We keep non-essential tracking to a minimum.

4. Sharing

We share data only with processors that help run the Service (hosting, email delivery, payments), each bound to protect it, and where required by law.

5. Retention

Account data is kept while your account is active. Detailed request logs are retained for a limited window (around 90 days) and then aggregated or deleted.

6. Your rights

You can access, correct, export or delete your personal data, including deleting your account from the dashboard. Contact us to exercise any right.

7. Security

API keys are stored hashed; sensitive values are encrypted at rest and transmitted over TLS. No method is perfectly secure, but we work to protect your data.

8. Contact

Privacy questions? Reach us through the contact page.