Privacy Policy

1. Information we collect

We collect four kinds of information:

• Account information — your name, email address, and authentication details when you sign up.
• Service data — the APIs, consumers, keys, plans, and request logs you create or ingest into ReqKey so we can operate the product. This includes the identifiers and usage data you choose to send us about your API consumers, which we process on your behalf.
• Usage and billing data — how you use the dashboard, plan and payment records, and technical logs (IP address, browser type) used for security and debugging.
• Checkout information — when you purchase a paid plan, your name, email address, billing address, and payment details are collected by Paddle.com, our Merchant of Record, as described in the Payments section below.

2. How we use information

We use the information above to:

• Provide and operate the service — validating keys, metering credits, and rendering analytics.
• Secure the platform — detecting abuse, fraud, and unauthorized access.
• Communicate with you — service notices, support replies, and (if you opt in) product updates.
• Improve the product — aggregate, de-identified usage patterns guide what we build.

3. Request logs and your API consumers

When you send request/response data to our ingest endpoint, ReqKey processes it on your behalf to power your analytics. You control what you send; avoid including end-user personal data you don’t need. That data is used only to provide the service to you — never for advertising, and never sold.

You are responsible for ensuring you have the rights, consents, or other legal basis needed to share your consumers’ data with ReqKey — for example through your own terms and privacy notice — and by creating an account you confirm that you do.

4. Cookies

We use cookies and similar storage strictly to keep you signed in and remember preferences such as your theme. We do not use third-party advertising cookies.

5. Sharing

We share data only with service providers that help us run ReqKey — cloud infrastructure (such as AWS and Cloudflare), payment processing (Paddle.com, our Merchant of Record, which handles payments, invoicing, and billing on our behalf), and email delivery — under contracts that limit how they may use it. Your payment card details are collected directly by Paddle and are never stored on ReqKey servers. We may also disclose information if the law requires it or to protect the rights and safety of ReqKey and its users.

6. Payments

ReqKey uses Paddle.com as our Merchant of Record. When you buy a paid plan, checkout is operated by Paddle, which collects the information needed to process the transaction — your name, email address, billing address, payment method details, and applicable tax information. Paddle processes this data under its own privacy policy, available at paddle.com/legal/privacy.

Paddle shares order and subscription records with us — what was purchased, transaction status, and billing contact details — so we can activate your plan and show billing history in your dashboard. We never receive or store your full card details.

7. Retention

We keep account data while your account is active. Request logs are retained according to your plan’s retention window. When you delete your account, we delete or de-identify your data within a reasonable period, except where the law requires us to keep it longer.

8. Security

We protect data with encryption in transit, scoped credentials, and least-privilege access internally. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you promptly.

9. Your rights

You can access, correct, export, or delete your account data at any time — most of it directly in the dashboard, and the rest by emailing support@reqkey.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, and we will honor them.

10. Changes to this policy

If we make material changes to this policy, we will notify you by email or in the dashboard before they take effect.

11. Contact

Privacy questions or requests: support@reqkey.com.