1. Overview

Rainfall DevKit ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our API service and website.

2. Information We Collect

2.1 Account Information

• Email address (for authentication and billing)
• Billing information (processed securely by Stripe)
• API usage statistics (request counts, timestamps)

2.2 API Usage Data

• Request logs (tool names, parameters, timestamps)
• Error logs (for debugging and service improvement)
• Rate limit tracking

Important: We do not store the content of your API requests (e.g., search queries, document content) beyond what is necessary for immediate processing and billing. Request data is typically retained for 30 days for debugging purposes, then automatically purged.

3. How We Use Your Information

• To provide and maintain our API service
• To process billing and payments
• To monitor usage and enforce rate limits
• To detect and prevent abuse or unauthorized access
• To send service-related notifications (billing, security alerts)

4. Data Sharing

We do not sell your personal information. We only share data with:

• Stripe: For payment processing (billing information only)
• Service providers: Infrastructure providers (hosting, logging) under strict confidentiality agreements
• Legal requirements: When required by law or to protect our rights

5. Data Security

We implement industry-standard security measures:

• All API traffic is encrypted via TLS/HTTPS
• API keys are hashed in our database
• Access controls and audit logging
• Regular security reviews and updates

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data (API logs, billing history)
• Cancel your subscription at any time

To exercise these rights, contact us at privacy@pragma-digital.com

7. Data Retention

• Account data: Retained until account deletion
• API request logs: 30 days
• Billing records: 7 years (legal requirement)
• Deleted accounts: All personal data purged within 30 days of deletion request

8. Cookies

We use minimal cookies:

• Authentication session cookies (essential)
• Theme preference (dark/light mode)

We do not use tracking cookies or third-party analytics.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service. Continued use after changes constitutes acceptance of the updated policy.