1. Information we collect
- Account information you provide directly or through supported authentication providers, such as email address, name, and profile image.
- Billing and subscription metadata needed to process paid usage. We do not receive full payment card details from Stripe.
- Account usage records, including API key metadata, holdings request parameters, request timing, response counts, and billing-related usage events.
- Cached holdings snapshots and upstream-source metadata needed to operate the service.
- Operational logs and security telemetry used to run, secure, and debug the service.
2. How we use information
- Provide holdings responses, account access, billing, credits, and API key management.
- Authenticate users, secure accounts, prevent abuse, and investigate fraud or misuse.
- Send transactional communications such as verification emails, password resets, and billing notices.
- Maintain reliability, troubleshoot incidents, and improve product performance.
3. Cookies and sessions
We use cookies or similar technologies for authentication sessions, security controls, and basic product functionality, including keeping you signed in. Disabling these technologies may limit access to account features.
4. Third-party providers
We use third-party providers to operate the service, including:
- Stripe for payment processing and billing operations.
- Google and Microsoft when you choose those login methods.
- Infrastructure, storage, networking, and email-delivery providers.
- Market data providers and issuer websites used to fulfill holdings requests.
We share information with providers only as needed to operate the service. Those providers process data under their own terms and privacy policies.
5. Data ownership and confidentiality
You retain ownership of the information you submit to ETF Holdings API. We do not sell your personal information. We use commercially reasonable measures to limit access to customer data to authorized systems and personnel who need that access to operate and support the service.
6. Sharing
We share information only as needed to provide the service, comply with law, collect payments, investigate abuse, or protect ETF Holdings API, our users, and the public. We do not sell personal information.
7. Data retention
We retain account, billing, usage, and holdings-cache data for as long as reasonably needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on the type of data and operational needs.
8. Security
We use reasonable safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your choices
You can stop using the service at any time. For requests related to access, export, or deletion of account data, contact hello@bytescale.io.
10. Changes
We may update this Privacy Policy from time to time. Continued use of the service after an updated policy becomes effective constitutes acceptance of the revised policy.
11. Contact
Questions about privacy can be sent to hello@bytescale.io.