This Privacy Policy describes how MEGABOT ("we", "us", or "our") collects, uses, and protects your personal information when you use our APIs and services.
01. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Username (if provided)
- Password (encrypted and hashed)
- API keys generated for your account
1.2 API Usage Data
When you use our APIs, we automatically collect:
- API request timestamps and endpoints accessed
- Request volume and rate limits
- IP addresses and geographic location
- Error logs and performance metrics
- User agent and technical information
1.3 Payment Information
Payment processing is handled by Stripe. We store:
- Stripe customer ID
- Subscription status and tier
- Billing history and invoices
We do NOT store credit card numbers or payment credentials. All payment data is securely processed by Stripe.
1.4 Cookies and Tracking
We use essential cookies for:
- Session management and authentication
- API key storage (localStorage)
- User preferences
See our Cookie Policy for details.
02. How We Use Your Information
We use collected information to:
- Provide Services: Authenticate API requests, enforce rate limits, and deliver API responses
- Billing: Process payments, send invoices, and manage subscriptions
- Support: Respond to inquiries, troubleshoot issues, and provide technical assistance
- Analytics: Monitor API performance, detect abuse, and improve our services
- Security: Prevent fraud, unauthorized access, and malicious activity
- Legal Compliance: Comply with legal obligations and enforce our Terms of Service
03. Data Sharing and Third Parties
3.1 Service Providers
We share data with trusted third-party providers:
- Stripe: Payment processing and subscription management
- Railway: Backend hosting and database services
- Firebase: Frontend hosting and analytics
- Chainstack & Helius: Solana RPC node providers
3.2 Legal Requirements
We may disclose information if required by law, court order, or government request, or to protect our rights and safety.
3.3 No Sale of Data
We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.
04. Data Retention
- Account Data: Retained until account deletion
- API Logs: Retained for 90 days for security and debugging
- Billing Records: Retained for 7 years for tax and accounting compliance
- Analytics Data: Aggregated and anonymized data retained indefinitely
05. Your Rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Deletion: Request deletion of your account and associated data
- Portability: Receive your data in a machine-readable format
- Opt-Out: Unsubscribe from marketing emails (we don't send many!)
- Restriction: Request limitation of data processing
To exercise these rights, email us at support@getmegabot.com.
06. Data Security
We implement industry-standard security measures:
- HTTPS/TLS encryption for all data transmission
- SHA-256 hashing for API keys and passwords
- Regular security audits and vulnerability scanning
- Access controls and role-based permissions
- Encrypted database backups
Important:
However, no system is 100% secure. You are responsible for keeping your API keys confidential.
07. International Data Transfers
Our services are hosted in the United States. By using MEGABOT, you consent to the transfer of your data to the U.S. and processing under U.S. privacy laws.
08. Children's Privacy
Our services are not intended for users under 18. We do not knowingly collect data from children. If you believe we have collected data from a minor, contact us immediately.
09. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services constitutes acceptance of changes.