Privacy Policy - Antijection

1. Introduction

Antijection ("we", "us", or "our") operates www.antijection.com (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and ensuring you have a positive experience on our website and in using our products and services.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

Email address
Name (if provided)
Payment information (processed securely through Stripe)

2.2 Usage Data

We automatically collect certain information when you use the Service:

API usage statistics (request counts, timestamps)
Detection results (risk scores, categories)
API response times and performance metrics
IP addresses (for security and fraud prevention)
Browser type and version
Device information

2.3 Prompts and Content

Important: We do NOT store the actual content of prompts you submit for analysis. We only store metadata about the analysis (risk scores, detection method used, latency) for service improvement and billing purposes.

3. How We Use Your Information

We use the collected data for various purposes:

To provide and maintain the Service
To process your transactions and manage your subscription
To notify you about changes to our Service
To provide customer support
To gather analysis or valuable information to improve the Service
To monitor the usage of the Service
To detect, prevent and address technical issues and fraud
To send you marketing communications (with your consent)

4. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and the context:

Contract Performance: Processing necessary to provide the Service you requested
Legitimate Interests: To improve our Service, prevent fraud, and ensure security
Consent: For marketing communications (you can withdraw consent at any time)
Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

Stripe: For payment processing
Supabase: For authentication and database services
Railway: For hosting and infrastructure
Groq: For AI model inference

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Usage data is typically retained for 90 days for analytics purposes. Account information is retained until you delete your account.

7. Your Data Protection Rights

Depending on your location, you may have the following rights:

7.1 GDPR Rights (EEA Users)

Right to Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Request restriction of processing your data
Right to Data Portability: Request transfer of your data
Right to Object: Object to our processing of your data
Right to Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Users)

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to say no to the sale of personal information
Right to access your personal information
Right to equal service and price

To exercise these rights, please contact us at privacy@antijection.com. We will respond to your request within 30 days.

8. Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Regular security audits and updates
Access controls and authentication
Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, we transfer your data to the United States and process it there.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

11. Children's Privacy

Our Service is not intended for use by children under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from children under 13. If you become aware that a child has provided us with personal information, please contact us. If we discover that a child under 13 has provided us with personal information, we will delete such information from our servers immediately.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We will also notify you via email or a prominent notice on our Service prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: privacy@antijection.com
Website: www.antijection.com