1. Data we collect
We store your email, password hash, optional display name and country, session metadata, API key hashes and prefixes, and credit and billing records. API request history includes the parameters you submit (which may include search terms), request ID, engine, search type, status, latency and client IP. Website visit logs include the route, client IP, country, browser details and referrer. Contact messages include your name, email and message.
2. Search request data
API request history, including submitted parameters and client IPs, is deleted after 60 days. Website visit logs are deleted after 90 days. Application diagnostic files older than 14 days are removed and contain request IDs, routes, statuses and timing. Separate search diagnostics may contain the submitted search and source response content for up to 14 days to investigate failures; selected authentication and cookie headers are masked. When you send an Idempotency-Key, a successful search response is stored for up to 24 hours so the request can be replayed. The search service may also cache results. Closing an account disables access and revokes sessions and keys, but does not remove account, usage, billing or audit records. The cleanup task does not automatically remove contact messages. Local database backups are kept for 30 days.
3. How we use data
To provide and secure the API, meter usage and billing, prevent abuse, and support you when you report a problem.
4. Sharing
We do not sell personal data. We share data only with sub-processors required to run the service (for example, hosting and payment providers) under contract.
5. Your rights
You can view your account details, edit your display name and close your account in Settings. Closing blocks sign-in and API access and revokes sessions and API keys, but it does not erase account, usage, billing or audit records. Request logs follow the retention described in Section 2. Use the contact form for questions about stored data.
6. Contact
You can send questions or feedback through the contact form.
7. Website analytics
Public pages use Google Analytics 4 to measure visits and traffic patterns. Google Analytics may collect page interaction, browser and device information, approximate location and cookie identifiers such as _ga. Sign-in, account, console and admin pages, as well as API endpoints, do not load this tag. See Google's Privacy Policy and Analytics data collection for details.