Privacy Policy

Who is responsible for your data

The controller of personal data is the administrator of the apigenerator.ai service. You can reach the administrator at [email protected] for any question about this policy or your data.

What data we process

• Account data: your work email address, the confirmation code sent to it (stored only as a hash) and the time of confirmation.
• Signup context: the page you signed up from, the demo source type and output you chose, and campaign parameters in the link you followed.
• Technical data: IP address, browser user agent and the referring page, used for security and abuse prevention.
• Customer content: schemas, descriptions, files and data you add to your projects, and the APIs generated from them.
• Usage data: requests to your hosted APIs, logs and analytics shown in your dashboard.
• Billing data: plan, billing period and payment status. Card details are entered on the payment processor page and are never stored by us.
• Correspondence: messages you send to [email protected].

Files in the public demo

The demo on the website parses your description or file in your browser. The file content is not sent to our servers. We store only the type of source and the output you chose if you create an account afterwards.

Why we process data and on what legal basis

• To create and run your account and the service you subscribe to (performance of a contract).
• To send the confirmation code, onboarding steps, service notices and billing emails (performance of a contract).
• To keep the service secure, prevent abuse and investigate incidents (legitimate interest).
• To understand which pages and features people use, in aggregated form (legitimate interest).
• To keep accounting and tax records (legal obligation).

Your content and AI models

We use AI models to design APIs from the sources you provide. Your schemas, files and data are never used to train AI models, by us or by the providers we work with.

Who receives data

We share data only with categories of service providers that help us run the service, under contracts that oblige them to protect it.

• Hosting and infrastructure providers.
• An email delivery provider for transactional emails.
• A payment processor for subscriptions.
• AI model providers that process project sources to generate APIs, without training on them.

We do not sell personal data and do not share it for advertising.

Transfers outside your country

Some providers process data outside the European Economic Area. In that case transfers rely on adequacy decisions or standard contractual clauses.

How long we keep data

• Account and project data: for as long as your account is active, and up to 30 days after you delete it.
• Unconfirmed signups: up to 12 months.
• Logs: up to 90 days, unless needed longer to investigate an incident.
• Billing records: for the period required by tax and accounting law.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, and receive it in a portable format. You can also lodge a complaint with your data protection authority. To exercise a right, write to [email protected] from the address of your account.

Cookies

We use essential cookies to keep you signed in, remember your choices and protect forms. We do not use advertising cookies. Aggregated statistics about page visits do not identify you.

Unsubscribing

Every email we send contains an unsubscribe link. Service and billing notices about an active subscription continue while the subscription runs.

Changes to this policy

We update this policy when the service changes. The effective date at the top shows the current version, and significant changes are announced by email to account holders.