Privacy Policy

Last updated: February 16, 2026

1. Information We Collect

When you create an account, we collect your email address and basic profile information provided through Google OAuth or email registration. When you subscribe to a paid plan, payment information is processed securely by Stripe — we do not store your credit card details.

We also collect usage data including API call logs, endpoints accessed, and timestamps to enforce rate limits and improve our service.

2. How We Use Your Information

To provide and maintain our API service
To manage your account and subscriptions
To enforce usage limits based on your subscription tier
To communicate service updates or changes
To detect and prevent abuse or unauthorized access

3. Data Sharing

We do not sell your personal information. We share data only with service providers necessary to operate our platform:

Supabase — authentication and database hosting
Stripe — payment processing
AWS — data storage and infrastructure

4. Data Retention

We retain your account data for as long as your account is active. API usage logs are retained for billing and analytics purposes. You may request deletion of your account and associated data by contacting us.

5. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed API keys, and secure authentication flows (PKCE) to protect your data.

6. Contact

For privacy-related inquiries, please reach out to us at founders@entityml.com.