This policy explains how socialgraph.dev ("we") handles personal data when you use socialgraph.dev. We collect as little as we need to run the Service.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Name, email address, password (stored only as a secure hash) | To create and secure your account and contact you about it | While your account is open |
| API keys (stored only as a hash, never in readable form) | To authenticate your API calls | Until you revoke them or close your account |
| API usage records: which endpoint, when, the result status, duration and credits used | Billing, your usage dashboard, abuse prevention and support | 90 days |
| Credit and payment records: amounts, currency, Dodo payment ID | Accounting, tax and refunds | As long as the law requires |
| IP address and basic request information in server logs | Security, rate limiting and troubleshooting | Up to 90 days |
We don't store the content of API responses or the parameters you send (such as usernames you look up), apart from transient processing to answer your request.
Payments
Payments are handled by Dodo Payments as merchant of record. Your card and payment details go directly to Dodo Payments and never reach our servers. Dodo Payments processes your data under its own privacy policy.
Cookies
We use only essential cookies: one to keep you signed in and one to protect forms against cross-site request forgery. We don't use advertising or third-party analytics cookies.
Who we share data with
- Service providers that host and run the Service (cloud hosting, databases) and process payments (Dodo Payments), only as needed to provide it.
- Authorities, when the law requires it.
We don't sell your personal data.
Data returned by the API
The API returns publicly available information from third-party platforms. When you use that information, you're responsible for having a lawful basis and complying with privacy laws that apply to you. Images sent to the age & gender API are fetched to produce an estimate and are not stored by us.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Email support@socialgraph.dev and we'll respond within the time the law requires. You can also complain to your local data protection authority.
Security
Passwords and API keys are stored as one-way hashes, all traffic is encrypted with HTTPS, and access to our systems is restricted. No system is perfectly secure, so please tell us at once if you suspect a problem with your account.
International transfers
Our servers and providers may be located in other countries. Where required, we use appropriate safeguards for transfers.
Changes
We'll update the date above when this policy changes, and notify you of significant changes.
Contact
socialgraph.dev — support@socialgraph.dev