How we handle your data.

1. Who we are

Apitalks s.r.o. is the data controller. Our registered details are in the imprint.

You can contact us at info@apitalks.com.

2. What this policy covers

This policy covers the apitalks.com website, the Apitalks data APIs, and billing for our services.

It does not cover third-party websites or services that we link to.

3. What we collect and why

Website. Cloudflare server logs record request metadata such as IP address, user agent, path, and timestamp. We use this for security and operations under our legitimate interest. If you email us or use a contact form, we keep your email address and message so we can reply and keep a record of the conversation. The legal basis is legitimate interest and, where your message is about buying or using the Service, steps to a contract.

API service. We process account name and email, API key, and usage metadata such as timestamps, endpoints, volume, and IP address. We use this to provide the Service, measure usage, secure the Service, and prevent abuse. The legal basis is contract and legitimate interest. API query parameters are not personal data.

Billing. We process name, email, company, VAT ID, invoice records, and payment status. We use this to bill you and meet legal accounting and tax duties. The legal basis is contract and legal obligation. Card data is handled by Stripe; we never store it.

To use any API — free or paid — we need your account data so we can set up your account and issue your key. For paid plans we also need your billing data to charge you and send invoices. Without this we can't provide the Service.

4. Who processes data for us

We use a small number of processors and sub-processors:

• Stripe for payments and billing records.
• Cloudflare for edge delivery, security, CDN, and logs.
• Hetzner for hosting.
• Amazon Web Services SES for transactional email such as API-key and onboarding messages.
• Google Workspace for the info@apitalks.com support mailbox.

5. International transfers

We aim to process data mainly in the EU or EEA.

Where a processor transfers data outside the EU or EEA, such as Stripe, it must use appropriate safeguards such as Standard Contractual Clauses.

6. How long we keep it

We keep account data while your account is active and for 30 days after closure, unless we need it longer for legal claims or accounting records.

We keep API usage logs for 12 months.

We keep invoices, accounting records, and tax records for up to 10 years, as required by Czech accounting and tax law.

We keep contact emails for as long as they are useful for the relationship or record-keeping, usually up to 7 years.

7. Your rights

Under the GDPR, you can ask us for access, rectification, erasure, restriction, portability, and objection.

You also have the right to complain to the Czech supervisory authority, Úřad pro ochranu osobních údajů (ÚOOÚ), at https://www.uoou.cz/.

To exercise your rights, write to info@apitalks.com.

We do not use automated decision-making or profiling.

8. Cookies and tracking

The website and API use no cookies and no tracking.

If this changes, we will update this policy before using cookies or tracking for a new purpose.

9. Changes and contact

We may update this policy. The "Last updated" date shows the latest version.

Questions about privacy go to info@apitalks.com.