Ready APIReady API

Privacy Policy

Last updated:

This Privacy Policy explains how Ready API ("we," "us," or "our") collects, uses, discloses, and protects your information when you use our API marketplace and website at https://ready-api.vercel.app.

1. Information We Collect

Account Information: When you register via Google OAuth, we collect your email, name, and Google account ID. If you register via phone number, we collect your phone number and a securely hashed password. You may also optionally provide a Telegram chat ID for notifications.

Usage Data: When you make API requests, we log the endpoint accessed, timestamp, IP address, HTTP method, response status code, and approximate response size. This data is used for rate limiting, analytics, and abuse prevention.

API Keys: We generate and store API keys on your behalf. Keys are encrypted at rest using AES-256-GCM. You may create, revoke, or rotate keys at any time from your dashboard.

Payment Data: We do not store full payment card details. Payments are processed by third-party payment processors (PayPal, Stripe, etc.). We retain only the transaction ID, amount, plan purchased, and timestamp for billing records.

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our API marketplace
  • Authenticate your identity and authorize API requests
  • Enforce rate limits, fair usage policies, and prevent abuse
  • Send service-related notifications (order confirmations, usage alerts, plan expiry warnings) via Telegram if you have opted in
  • Generate anonymous aggregate usage statistics
  • Comply with legal obligations

3. Data Storage & Security

Your data is stored in Airtable (our primary database provider) which maintains SOC 2 compliance and data encryption at rest. Additional security measures include:

  • Passwords are hashed using bcrypt with a cost factor of 12
  • API keys are encrypted with AES-256-GCM before storage
  • All communications with our servers use TLS 1.3
  • Database access is restricted to authorized services only
  • We conduct regular security audits

4. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following circumstances:

  • Service Providers: We share data with Airtable (database hosting), Vercel (application hosting), and payment processors solely for service delivery.
  • Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

5. Data Retention

We retain your account information for as long as your account is active. Upon account deletion, we remove your personal information within 30 days. Usage logs and analytics data may be retained for up to 12 months for security analysis and service improvement.

6. Your Rights & Choices

  • Access: You may request a copy of your personal data at any time.
  • Correction: You may update your account information through the dashboard.
  • Deletion: You may request deletion of your account and associated data.
  • API Key Management: You can create, revoke, or rotate API keys from your dashboard at any time.
  • Opt-Out: You may disable Telegram notifications from your dashboard settings.

7. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or behavioral advertising. You may disable cookies in your browser settings, but this may affect service functionality.

8. Third-Party Services

Our API marketplace provides access to data from third-party sources (e.g., iSagha, DahabMasr, government databases). We do not control these third parties' data practices. We encourage you to review their privacy policies when using data obtained through our APIs.

9. International Transfers

Your data may be processed in countries where our service providers operate. We ensure appropriate safeguards are in place through standard contractual clauses and data processing agreements.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or through the dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, data requests, or concerns, please contact us:

  • Through our Telegram bot
  • Via email from your registered account
  • Through the contact form on our website

12. Related Policies