Privacy policy

1. Information we collect

We collect minimal information necessary to deliver and meter our API services:

• Account credentials: Email address, username, and hashed authentication credentials.
• Usage metadata: Timestamp, endpoint path, HTTP method, response status code, latency, and token consumption for billing records.
• Payment records: Transaction references and token balance records processed via Stripe. We do not store full credit card numbers.

2. What we do not collect or log

flowxapi enforces a strict privacy boundary:

• We do not sell personal data to data brokers or third-party advertisers.
• We do not inspect or store the contents of your private direct messages or customer payload data beyond transient request proxying and active webhook delivery queues.

3. Data retention and ledger logs

Request ledger records in your Usage dashboard are retained for 90 days to enable billing audits and CSV exports. After 90 days, request logs are aggregated into monthly spend summaries and detailed records are purged.

4. Security measures

All communications between your client application and flowxapi are encrypted in transit using TLS 1.3. API keys and webhook signing secrets are stored using cryptographic hashes.

5. Developer rights and data deletion

You may request full deletion of your developer account and associated data by emailing [email protected].