Privacy Policy

Introduction

KeyStash ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our JSON storage API service at keystashapi.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

• Email address (for account creation and communication)
• API keys (generated for service access)
• Subscription and billing information (for paid plans)

JSON Data

• JSON objects you store using our API
• Key names you assign to your JSON data
• Metadata (timestamps, data size, access frequency)

Usage Information

• API request logs (for rate limiting and service monitoring)
• IP addresses (for security and abuse prevention)
• Usage statistics (number of requests, data transfer)

How We Use Your Information

• Service Delivery: To provide, maintain, and improve our JSON storage API
• Account Management: To manage your account, subscriptions, and billing
• Communication: To send service-related notifications and support responses
• Security: To detect, prevent, and address technical issues and security threats
• Analytics: To understand usage patterns and improve our service
• Legal Compliance: To comply with applicable laws and regulations

Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS) and at rest (AES-256)
• Access Control: Strict access controls and authentication mechanisms
• API Keys: Secure API key generation and management
• Monitoring: Continuous security monitoring and threat detection
• Regular Audits: Regular security assessments and updates

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information or JSON data to third parties. We may share information only in these limited circumstances:

• Service Providers: With trusted third-party services (hosting, payment processing) under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or governmental request
• Security: To protect our rights, property, or safety, or that of our users
• Business Transfer: In connection with a merger, acquisition, or sale of assets (with user notification)

Data Retention

• JSON Data: Stored until you delete it or close your account
• Account Information: Retained for the duration of your account
• Usage Logs: Retained for 90 days for service optimization and security
• Billing Records: Retained as required by law (typically 7 years)

Your Rights

You have the following rights regarding your data:

• Access: Request copies of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data in a machine-readable format
• Withdrawal: Withdraw consent for data processing (where applicable)

To exercise these rights, contact us at privacy@keystashapi.com

Cookies and Tracking

KeyStash uses minimal cookies and tracking:

• Essential Cookies: Required for service functionality (authentication, security)
• Analytics: Anonymous usage statistics to improve our service
• No Third-Party Tracking: We do not use advertising or social media tracking pixels

International Data Transfers

KeyStash operates globally. Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions.

Children's Privacy

KeyStash is not intended for users under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending email notification for material changes