Privacy Policy

Last Updated: 13-10-2025

Version: 1.0

Welcome to API - Keshtay L.C. (Keshtay L.C.). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, API, and related services (the "Service"). By using the Service you agree to the collection and use of information in accordance with this policy.

1. Data Controller

Keshtay L.C. (Registration No.: 7775148) is the data controller for personal information collected through the Service.

Address: 8206 Louisiana Blvd NE, Ste A #4253, Albuquerque, New Mexico 87113, US

For privacy questions or requests, contact: legal@keshtay.com.

2. Information We Collect

Account & Profile

• Full name, email address, company name and business contact details.
• Profile information you provide (bio, avatar, billing address, tax information).

Payment & Billing

• We use Stripe to process payments. We do not store full card numbers on our servers — Stripe handles card data and returns a token or customer id.
• Billing history, invoices, subscription status and payment metadata required to provide and support subscriptions.

Usage & Technical Data

• API usage metrics, request and response logs, endpoints accessed, timestamps and request metadata.
• IP addresses, user agent, and other connection information for security, rate limiting, fraud detection and troubleshooting.
• Performance metrics (latency, error rates) used to maintain and improve the Service.

Preferences & Settings

• User preferences such as theme, notification settings, usage alert thresholds, and other account settings.

Communications

• Support requests, emails, and messages you send to us.

3. How We Use Your Information

• To provide, operate and maintain the Service (including API access, dashboards, billing and subscription management).
• To process payments and manage subscriptions via Stripe.
• To monitor usage, enforce rate-limits and apply tier-based throttling for abuse prevention.
• To send account and service-related communications, alerts (including usage threshold alerts) and transactional messages.
• To investigate, detect and prevent fraud and security incidents.
• To comply with legal obligations and enforce our terms of service.

4. Legal Basis for Processing (EEA users)

Where applicable, we process personal data on one or more of the following bases: performance of a contract, legitimate interests (service improvement, security, fraud prevention), consent (marketing communications), or compliance with legal obligations.

5. Sharing & Third Parties

We do not sell personal information to third parties. We share personal information with trusted service providers necessary to operate the Service, including but not limited to:

• Stripe and other payment processors to handle payments and create billing portal sessions.
• Hosting, analytics and monitoring providers to operate and improve the Service.
• Email delivery and support tooling providers.
• Backup and storage providers.

These providers process data on our behalf under contract and are required to implement appropriate safeguards. We may also disclose information to comply with legal obligations or to protect our or others' rights.

6. Cookies, Local Storage & Tracking

We use cookies and local storage for session management, preferences (theme, UI settings), analytics and to provide a smoother user experience. You can manage cookie preferences via your browser. Aggregated analytics do not identify you personally.

7. Data Retention

We retain account and billing records for as long as necessary to provide the Service and to comply with legal and tax obligations. Request logs and raw API logs are retained for 90 days by default for troubleshooting and security; aggregated analytics may be retained longer. If you delete your account we will remove or anonymize personal data except where we are required to retain it for legal or legitimate business reasons (e.g., completed transactions, tax records).

8. Security

We implement technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure or destruction. Measures include network and application firewalls, encryption in transit (TLS), access controls, and periodic security reviews. While we strive to use strong protections, no system is completely secure — report suspected breaches to legal@keshtay.com.

9. International Transfers

Data may be processed or stored in countries other than your country of residence (for example our hosting or third-party providers). When transferring data across borders we take steps to ensure adequate safeguards are in place (standard contractual clauses, privacy-commitments of processors, etc.).

10. Your Rights

Depending on your jurisdiction, you may have rights including:

• Access to and a copy of your personal data.
• Correction of inaccurate information.
• Deletion of your account and personal data (subject to legal retention requirements).
• Portability of data in a machine-readable format.
• Object to or restrict certain processing activities.

To exercise rights email legal@keshtay.com. We may need to verify your identity before fulfilling requests.

11. Automated Decisions & Profiling

We use automated processes for security, rate-limiting and tier assignments. These processes do not make decisions that have legal or similarly significant effects on you without human review. If you believe an automated decision has been applied incorrectly, contact support.

12. Children

Our Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we learn we have collected such data we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes we will provide notice (e.g., prominent notice on the Service or email). Continued use of the Service after changes constitutes acceptance of the updated policy.

14. How to Contact Us

For privacy inquiries, data requests, or to report a breach:

Email: legal@keshtay.com

Mail: Keshtay L.C., 8206 Louisiana Blvd NE, Ste A #4253, Albuquerque, New Mexico 87113, US

15. Additional Notices

Specific features may present additional privacy notices (for billing, invoicing, or third-party integrations). Where separate consents are required (for example marketing emails or optional analytics sharing), we will request your consent at the time of collection. Consent and policy acceptance are tracked and viewable in your account under Policy Consent History.

This Privacy Policy was last updated on the date shown above. Version: 1.0