Your data is used for: account authentication, API access authorization, usage analytics (aggregate, not individual tracking), abuse prevention, and billing reconciliation.
Stripe processes payments. When you purchase credits, Stripe receives your email and payment information under their privacy policy. We never see or store your card number.
Resend delivers transactional emails (verification codes, password resets). They receive your email address under their privacy policy.
We do not use Google Analytics, Facebook Pixel, or any third-party tracking or advertising services.
We use one essential httpOnly session cookie for authentication. No tracking cookies, no analytics cookies, no third-party cookies. See our Cookie Disclosure for details.
If you are in the European Economic Area, you have the right to:
To exercise any of these rights, email support@apimesh.xyz.
If you are a California resident, you have the right to:
We do not operate financial incentive programs tied to personal data.
We protect your data with: Argon2id password hashing, HTTPS-only connections, per-IP rate limiting, CSRF protection, httpOnly secure session cookies, and regular security reviews.
Data is stored on Hetzner servers. If you are outside the server's jurisdiction, your data may be transferred internationally. We rely on standard contractual clauses where applicable.
APIMesh is not intended for use by anyone under the age of 13. We do not knowingly collect data from children.
We will notify you of material changes via email at least 30 days before they take effect.
For privacy inquiries: support@apimesh.xyz
Data Protection Officer: privacy@apimesh.xyz