Privacy Policy

Last updated: December 31, 2025

1. Information We Collect

We collect information you provide directly to us when using our Service:

  • Account Information: Email address, name, and payment information when you create an account
  • API Usage Data: The queries you make to our API, including words and phrases searched
  • Technical Data: IP address, browser type, and device information

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process payments and send billing-related communications
  • Monitor API usage and enforce rate limits
  • Detect and prevent fraud or abuse
  • Send technical notices and support messages
  • Improve our phonetic database and algorithms (anonymized data only)

3. Data Retention

We retain your account information for as long as your account is active. API usage logs are retained for 90 days for debugging and analytics purposes. You may request deletion of your data at any time.

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Payment processors (Stripe), hosting providers (Railway)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger or acquisition

5. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. API keys are hashed and never stored in plain text.

6. Cookies

We use minimal cookies for essential functionality only. We do not use tracking cookies or third-party advertising. Analytics are privacy-focused and do not track individual users.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Opt out of non-essential communications

8. International Transfers

Our servers are located in the United States. If you are accessing the Service from outside the US, your data will be transferred to and processed in the US.

9. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

11. Contact

For privacy-related questions or to exercise your rights, contact us at api@rhyme.rest