Privacy Policy

Information we collect

We collect information that you give us, information generated when you use PricesAPI, and limited information from service providers:

• Account and authentication information: your email address, name, password hash if you use credentials, optional Google profile picture, authentication method, session information and API key.
• Billing information: your plan, credit allowance and usage, subscription status, and Stripe customer or subscription identifiers. Stripe processes payment-card and bank details; PricesAPI does not store complete card numbers.
• API queries and usage: request time, endpoint, method, query parameters such as a product term or URL and market, response status, latency, cache and result metadata, and the customer account that made the request.
• Schedules and Search History: scheduled terms, country, frequency, status, recent API search activity and discovery outcomes needed to operate those features.
• Communications: messages you send to support, and email delivery, bounce, complaint, open or click events where engagement tracking is enabled.
• Website and device information: cookie identifiers and technical information such as browser, device, approximate location and IP address received by us or our analytics and hosting providers.

How we use information

We use information to:

• create and secure accounts, authenticate API requests and provide customer support;
• run product search, caching, Schedules, Search History and dashboard features;
• apply plans, credits, rate limits and billing rules;
• send transactional, onboarding and service communications;
• measure reliability and product usage, prevent abuse, investigate incidents and improve PricesAPI; and
• comply with legal obligations and enforce our Terms of Service.

We do not sell personal information. We do not use customer API queries to advertise unrelated third-party products.

Cookies, analytics and local storage

PricesAPI uses essential cookies for Auth.js sessions and account security. In production, Google Analytics uses cookies or similar identifiers to help us understand visits, navigation and product usage.

The Playground may use your browser's localStorage to keep recent searches on that device. You can clear cookies and local storage in your browser. Blocking essential cookies can prevent sign-in; blocking analytics may reduce measurement without stopping the core API.

Sharing and overseas processing

We disclose information only as needed to operate PricesAPI, complete a transaction, protect the service, comply with law, or with your direction. Current service providers include:

• Stripe for subscriptions, invoices and payment processing;
• Google for Google Sign-In and Google Analytics;
• Resend for customer email submission, delivery and engagement events; and
• infrastructure and hosting providers used to deliver the website, API, databases and logs.

Our primary PricesAPI PostgreSQL data is hosted on infrastructure in Australia. Stripe, Google, Resend and other providers may process or store information outside Australia, including in the United States and other countries where they or their subprocessors operate. Their handling is also governed by their own privacy terms.

We may disclose information where reasonably necessary to respond to lawful requests, protect rights or safety, investigate abuse, or support a business reorganisation. We do not give another customer access to your account, API key, private Schedules or usage history.

Google Sign-In

If you choose Google Sign-In, Google shares the profile information you approve—normally your name, email address and profile picture—so we can create or identify your PricesAPI account. PricesAPI does not receive or store your Google password.

You can review or remove PricesAPI's access from your Google Account. Removing access does not automatically delete information already held in your PricesAPI account; contact us if you also want an access or deletion request.

Retention and security

We keep information for as long as reasonably needed to provide the service, administer the account, maintain billing and security records, resolve disputes and meet legal obligations. Retention varies by record type. Backups and fraud or accounting records may remain for a limited period after account information is removed.

We use measures such as access controls, transport encryption, password hashing, scoped API authentication and operational monitoring. No online service can guarantee absolute security. Please keep your API key and account credentials confidential and tell us promptly if you believe they have been compromised.

Your privacy choices

You may ask to access, correct or delete personal information associated with your account by emailing support@pricesapi.io. We may need to verify your identity and may retain information where the law or a legitimate security, billing or dispute-resolution need requires it.

You can unsubscribe from non-essential marketing or lifecycle email using the link in the message or by contacting us. Transactional messages about account security, billing or the operation of a requested service may still be sent.

Questions and complaints

Send privacy questions or complaints to support@pricesapi.io. We will acknowledge and investigate a complaint within a reasonable period and explain the outcome or any further information we need.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

We may update this policy as PricesAPI, our providers or applicable requirements change. We will publish the revised date here and provide additional notice when a change materially affects how we handle personal information.