Privacy Policy
1. Who we are
Black Hair API ("we", "us", "our") is a developer API service providing hair care product data for Black and textured hair. We are operated by Andrien Ricketts, based in the United Kingdom. You can contact us at hello@blackhairapi.com.
2. What data we collect
We collect the following information when you use our service:
- Account information — your name and email address when you subscribe
- Payment information — processed securely by Stripe; we never store your card details
- API usage data — request counts, endpoints called, and timestamps associated with your API key
- Communications — emails you send to us via the contact form
3. How we use your data
- To provide and maintain the API service
- To send you your API key and account-related emails
- To monitor usage and enforce rate limits
- To respond to your support requests
- To detect and prevent abuse of the service
4. Legal basis for processing
We process your data on the basis of contract performance (to provide the service you subscribed to) and legitimate interests (to maintain the security and integrity of the API).
5. Data sharing
We do not sell your personal data. We share data only with the following third-party services that help us operate:
- Stripe — payment processing
- Resend — transactional email delivery
- Railway — cloud infrastructure hosting
- Cloudflare — DNS and CDN services
6. Data retention
We retain your account data for as long as your subscription is active and for up to 7 years afterwards for legal and accounting purposes. API usage logs are retained for 90 days.
7. Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data. You also have the right to restrict or object to processing and the right to data portability. To exercise any of these rights, contact us at hello@blackhairapi.com.
8. Cookies
Our marketing website uses no tracking cookies. Our admin panel uses a session cookie for authentication which is essential to the service and does not require consent.
9. Security
We use industry-standard security measures including encrypted connections (HTTPS), hashed API keys, and regular database backups. We never store payment card details.
10. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or to exercise your rights, contact us at hello@blackhairapi.com.