Legal
Privacy Policy
Last updated: March 20, 2025
1. Introduction
KeyAPI ("we", "our", or "us") operates the KeyAPI platform, including the website at keyapi.ai and all related APIs, tools, and services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
Account Information
When you register for an account, we collect your email address, name, and a hashed password. If you sign up via a third-party OAuth provider (e.g. Google), we receive the profile information permitted by that provider.
Usage Data
We automatically collect information about how you interact with the Service, including API request logs (endpoint called, timestamp, response code, and latency), IP address, browser type, device identifiers, and pages visited on keyapi.ai.
Payment Information
If you purchase a paid plan or credit pack, payment is processed by our third-party payment processor (Stripe). We do not store full card numbers or sensitive payment data on our servers. We retain transaction records (amount, date, plan) for billing and compliance purposes.
API Keys
We generate and store API keys associated with your account. Keys are stored in hashed form and used solely to authenticate your requests to the Service.
Communications
If you contact us by email or through a support channel, we retain the content of those communications and your contact details to respond to your inquiry and improve support quality.
3. How We Use Your Information
- Provide, operate, and maintain the Service
- Authenticate your identity and authorize API requests
- Process transactions and send billing confirmations
- Monitor usage to enforce rate limits, fair-use policies, and plan quotas
- Detect, investigate, and prevent fraudulent or unauthorized activity
- Send transactional emails (e.g. account confirmation, password reset)
- Send product update or marketing emails — you may opt out at any time
- Improve the Service through aggregate analytics and usage patterns
- Comply with legal obligations
4. Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We may share your information with:
- Service providers acting on our behalf (e.g. Stripe for payments, Vercel/cloud providers for hosting, email delivery services) under appropriate data processing agreements.
- Law enforcement or government authorities when required by applicable law, court order, or to protect the rights, property, or safety of KeyAPI, our users, or the public.
- A successor entity in the event of a merger, acquisition, or sale of all or substantially all of our assets, provided the successor agrees to honor this Privacy Policy.
5. Data Retention
We retain your account information for as long as your account is active or as needed to provide the Service. API request logs are retained for up to 90 days for debugging and abuse-prevention purposes. Anonymized aggregate statistics may be retained indefinitely.
You may request deletion of your account and associated personal data at any time by contacting us at support@keyapi.ai. We will process deletion requests within 30 days, subject to any legal retention obligations.
6. Cookies & Tracking
We use essential cookies to maintain your authenticated session. We also use analytics cookies (via Google Analytics) to understand how visitors interact with keyapi.ai. You can control cookie preferences through your browser settings.
Our site does not respond to Do Not Track (DNT) signals at this time.
7. Third-Party Services
The Service integrates with third-party social media platforms (TikTok, Instagram, YouTube, Twitter/X, etc.) to provide data via their public APIs. KeyAPI does not store the social media content returned by those APIs beyond the duration of your request. Your use of data retrieved through KeyAPI remains subject to the terms and privacy policies of the respective platforms.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request erasure of your personal data (subject to legal retention requirements).
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to certain types of processing, including direct marketing.
- Restriction — request that we limit how we process your data in certain circumstances.
To exercise any of these rights, email us at support@keyapi.ai. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
9. Data Security
We implement industry-standard security measures including TLS encryption in transit, hashed credential storage, and access controls. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.
10. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at support@keyapi.ai and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice within the Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
KeyAPI
Email: support@keyapi.ai