SpicyAPIspicyAPI

Privacy Policy

Last updated: 27 June 2025

🔒 Privacy Commitment

SpicyAPI.com ("SpicyAPI", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API services (the "Services").

1. Data Controller

The data controller responsible for your personal information is:

Service: SpicyAPI.com

Contact Email: contact@spicyapi.com

2. Information We Collect

2.1 Information You Provide to Us

  • Account Information: When you register for an account, we collect your email address and account credentials (such as a hashed password).
  • Payment Information: We use third-party payment processors (e.g., Stripe). We do not store your full credit card details, but we may receive transaction identifiers and summary information.
  • Communications: If you contact us directly, we may receive additional information such as your name, the contents of your message, and any other information you may choose to provide.

2.2 Information We Collect Automatically

  • Usage Data: We collect information about your use of the Services, such as API requests, the endpoints you access, IP addresses, timestamps, and API usage statistics.
  • Device and Technical Information: We may collect information about the device and software you use to access our Services, including browser type and version.
  • Cookies: We use essential cookies for authentication, security, and basic site functionality. We do not use tracking or advertising cookies.

2.3 Content Data

  • API Inputs: We process the text prompts and parameters you submit through the API ("Input") to generate the requested content. The Services do not accept uploaded images or other media.
  • Generated Content: We temporarily store the generated images or videos ("Output") to deliver them to you.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide and Maintain the Services: To operate our API, process your requests, manage your account, and process payments.
  • To Improve and Analyze the Services: To understand usage patterns, diagnose technical issues, and improve the performance and safety of our API. We may use Input and Output for these purposes.
  • To Communicate with You: To send you service-related announcements, technical notices, security alerts, and support messages.
  • For Security and Fraud Prevention: To monitor for malicious or prohibited activity and to enforce our Terms of Service.
  • To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes, such as responding to lawful requests from public authorities.

4. Legal Basis for Processing (for EEA/UK Users)

If you are in the European Economic Area (EEA) or the UK, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. We process your data based on:

  • Contractual Necessity: To fulfill our contract with you to provide the Services.
  • Legitimate Interests: For our legitimate interests, such as improving the Service, security, and fraud prevention, provided these are not overridden by your data protection interests.
  • Legal Obligation: To comply with our legal duties.
  • Consent: Where we specifically ask for your consent for a processing activity.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with the following third parties:

  • Service Providers: We use third-party vendors for hosting, payment processing (e.g., Stripe), and analytics. These providers only have access to the information necessary to perform their functions and are obligated to protect it.
  • Legal Requirements: We may disclose your information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

6. Data Retention and Deletion

6.1 Account Data: We retain your account information for as long as your account is active and for a reasonable period thereafter for legal or business purposes.

6.2 Content Data: API Inputs and Outputs are retained for a maximum of 30 days for service delivery, troubleshooting, and to monitor for abuse, after which they are automatically deleted from our systems. We do not use this data to train our AI models.

6.3 Log Data: Technical logs are retained for up to 12 months for security analysis and service improvement.

6.4 Deletion: You can request the deletion of your account and associated personal data by contacting us. Please note that we may need to retain certain information for legal or legitimate business purposes, such as transaction records.

7. Data Security

We implement industry-standard technical and organizational measures to protect your information. This includes using encryption for data in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. We ensure that for any transfers of data to countries outside the UK/EEA, we put in place appropriate safeguards, such as Standard Contractual Clauses, to protect your data.

9. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

  • The right to access, update, or delete the information we have on you.
  • The right of rectification.
  • The right to object to our processing.
  • The right of restriction.
  • The right to data portability.
  • The right to withdraw consent at any time.

To exercise these rights, please contact us at contact@spicyapi.com. We will respond to your request in accordance with applicable law.

10. Age Restrictions

Our Services are intended exclusively for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Supervisory Authority

If you have concerns about our data practices, we encourage you to contact us first. However, you have the right to lodge a complaint with a data protection supervisory authority. For UK residents, the relevant authority is the Information Commissioner's Office (ICO).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at: contact@spicyapi.com