Privacy Policy

Last updated: May 2026

1. Information We Collect

When you subscribe to CoreStackAPI services, we collect:

Email address (for account and billing communications)
Payment information (processed securely by Lemon Squeezy or RapidAPI — we do not store card details)
API usage logs (request timestamps, endpoint called, response codes — no content)

2. Document Processing

Images and documents submitted to our APIs (e.g., invoices, receipts) are processed in real time and not stored after the response is returned. We do not retain, analyze, or share the content of your documents.

3. How We Use Your Information

To provide and maintain our API services
To send billing receipts and important service updates
To monitor API usage for rate limiting and abuse prevention
To improve our services (aggregate, anonymized usage statistics only)

4. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

Payment processors (Lemon Squeezy, RapidAPI) for billing
As required by law or legal process

5. Data Retention

Account information is retained while your subscription is active. API request logs are retained for 30 days for debugging purposes, then automatically deleted.

6. Security

All API communications are encrypted via HTTPS/TLS. Payment processing is handled by PCI-compliant third parties. We do not store sensitive payment information.

7. Your Rights

You may request deletion of your account data at any time by emailing [email protected]. We will process requests within 30 days.

8. Contact

Privacy questions: [email protected]