Privacy Policy

Who we are

ApiShip ("ApiShip", "we", "us"), trading as ApiShip, operates the ApiShip usage-metering and billing service. If you need to reach us about anything in this policy, email privacy@apiship.store. We act as the data controller for the account, billing and website data described below, and as a processor for the data you push through our API about your own customers.

What we collect

• Account information: your work email address, a hashed password, and optionally your company name.
• Service data you send us: the metered usage events, customer identifiers, rate cards and credit balances you push through the API so we can compute your billing figures.
• Order and billing data: when you buy a paid plan, our payment processor Stripe collects and processes your payment details, billing name, address and tax identifiers. We never see or store your card number; we receive only the subscription record (plan, price, status, billing period, and the email used at checkout) so we can activate and support your plan.
• Basic technical data: our hosting and database providers process standard request data (such as IP address and timestamps) to deliver and secure the service.

Do not send us sensitive personal data, payment card numbers or end-user credentials through the usage API - identifiers should be pseudonymous.

Why we use it

• To provide the service you signed up for, including metering, rating and invoicing - on the basis of performing our contract with you.
• To send service and account emails (such as sign-up confirmation and billing notices) - on the basis of performing our contract with you. Marketing emails are sent only with your consent and can be unsubscribed at any time.
• To take payment, activate and renew your plan, apply plan limits, and keep invoicing and tax records - on the basis of performing our contract with you and our legal obligations.
• To keep the service secure, prevent abuse and meet legal obligations - on the basis of our legitimate interests and legal obligations.

Where you send us data about your own customers, you are the controller and we act as your processor, handling that data only on your instructions.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

Cookies and analytics

This site sets no advertising or analytics cookies and uses no third-party trackers. If that changes we will update this policy and ask for consent where the law requires it before any non-essential cookie is set.

Who processes your data

We use a small number of recipients to run the service:

• Service providers: a cloud hosting provider, a managed database provider for account and usage data, and an email provider for service messages. They process data only on our instructions and under contract.
• Payment processor: Stripe, Inc. Stripe handles checkout, subscription management and payment card data for our paid plans and is a controller of the payment data it collects; see the Stripe privacy notice. ApiShip remains the seller of record for your order.
• Professional advisers (accounting, legal) and authorities where we are required by law to disclose.

Some of these recipients may store data outside your country, including in the United States, using appropriate transfer safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep account and usage data for as long as your account is open, and delete or anonymise it within 90 days of account closure. Order, invoice and tax records held by us and by Stripe are kept for as long as tax and accounting law requires (typically 6 to 10 years).

How we protect your data

We apply appropriate technical and organisational measures: encryption in transit (HTTPS) and at rest with our database provider, hashed passwords, hashed API keys, row-level access rules so each account can only reach its own records, least-privilege access for the few people who administer the service, and segregated production credentials. Card data never reaches our systems as it is handled entirely by Stripe. No system is perfectly secure, so please tell us at privacy@apiship.store if you suspect a problem with your account.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict use of your personal data, to withdraw consent at any time, or to object to processing. You can unsubscribe from any email we send with one click. To exercise any right, email privacy@apiship.store and we will respond within 30 days. If you are in the EEA or UK you may also complain to your local data protection authority.

We do not sell or share personal information as those terms are defined under California law, and we do not knowingly collect data from anyone under 16.

Changes

We will post any update to this policy on this page and change the date above.

Back to the homepage