Privacy policy

What we collect, and why

• Account (email): to provide the service. Legal basis: performance of the contract.
• API keys and call history (keys stored hashed; service, endpoint, credits used, transaction hash): to run and bill the service. Legal basis: performance of the contract.
• Payments (amounts and receipts; card details are handled by our payment provider, never by us): billing and accounting. Legal basis: contract and legal obligation.
• Newsletter or waitlist email: to send you updates. Legal basis: your consent, which you can withdraw at any time.
• Audience measurement and technical logs (anonymous, without cookies): security and improving the site. Legal basis: our legitimate interest.

We don't sell your data and we don't run ads. We don't store the responses of the APIs you call.

Recipients

Your data is processed by our technical providers (hosting, authentication, payment, email). Some are located in the United States; these transfers rely on the European Commission's standard contractual clauses.

Retention

• Account, API keys and call history: until your account is deleted.
• Payment records: 10 years, as required by French accounting law.
• Newsletter or waitlist: until you unsubscribe.
• Technical logs: a few weeks at most.

Your rights

You can access, correct, delete or export your data, object to its processing or withdraw your consent by writing to contact@allow402.com. You may also complain to your data protection authority (in France, the CNIL).

Cookies

Only the cookies strictly necessary to keep you signed in. No advertising or tracking cookies.

Data controller

SEBOUAI, contact@allow402.com.