Introduction
At ApiNotes ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our service. We are committed to processing your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Information We Collect
We collect information that you provide directly to us when you register, create a project, or communicate with us.
Account Information
- Personal Details: Name, email address, and profile picture (via OAuth providers).
- Credentials: We store secure authentication tokens. We never see or store your raw passwords from third-party logins (GitHub/Google).
- Billing Data: Payment history and subscription details (processed securely by our payment provider, Lemon Squeezy).
Usage Data
- System Logs: IP address, browser type, operating system, and access times.
- Analytics: Feature usage patterns to help us improve the platform (using anonymized data where possible).
User Code & Specification Data
Your Intellectual Property
This section explicitly outlines how we handle the OpenAPI specifications and code files you upload. You retain 100% ownership of your data.
Because our core service involves processing your API specifications (JSON/YAML) to generate documentation and provide fixes, we interact with your files in the following ways:
Storage & Access
Your uploaded specifications are stored securely in our database to facilitate documentation hosting and versioning. Our system allows automated processing to render documentation and run validation checks. Our team does not manually open, read, or review your proprietary code or specifications unless explicitly required for support troubleshooting at your request.
AI "Fix My Spec" Feature
If (and only if) you use our AI fixing tools, relevant portions of your specification are sent to our AI provider (OpenAI) solely for the purpose of generating formatting corrections. This data is not used to train public models.
Data Ownership
You retain full intellectual property rights to all specifications, code, and documentation uploaded to or generated by our platform. We claim no ownership over your work.
How We Use Your Information
We use the collected information for the following specific purposes:
Data Retention
We retain your personal information and uploaded content only for as long as is necessary for the purposes set out in this Privacy Policy.
Active Accounts
We store your API projects and documentation while your account is active to provide the hosting service.
Deleted Accounts
If you delete your account, your personal data and all uploaded projects/specifications are permanently deleted from our production databases within 30 days.
Backups
Encrypted backups may retain residual data for up to 90 days for disaster recovery purposes before being overwritten.
Service Providers
We may share data with trusted third-party vendors who assist us in operating our service. These partners are bound by confidentiality agreements:
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights (including deletion requests), please contact us: