Privacy Policy

This Privacy Policy describes how ApiTrinity B.V. ("ApiTrinity", "we", "us", or "our") collects, uses, and shares information about you when you use our website, platform, and services (collectively, the "Service").

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name (optional), and password. If you sign up via a third-party provider (e.g., GitHub or Google), we receive your name and email from that provider.

Usage Data

We automatically collect information about how you use the Service, including pages visited, features used, actions taken, timestamps, and browser/device information. This data helps us improve the platform and troubleshoot issues.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number or bank account details on our servers. We receive only a tokenized reference, the last four digits of your card, and billing address for invoicing purposes.

Content You Provide

When you use ApiTrinity, you may upload OpenAPI specifications, write documentation content, and configure project settings. This content is stored on our infrastructure to provide the Service.

2. How We Use Your Information

• Provide, operate, and maintain the Service
• Process transactions and send billing-related communications
• Send service updates, security alerts, and support messages
• Improve and develop new features based on aggregated usage patterns
• Respond to your comments, questions, and support requests
• Detect, prevent, and address technical issues or abuse
• Comply with legal obligations

3. Data Sharing

We do not sell your personal data. We may share your information with the following categories of third parties, only as necessary to provide the Service:

• Payment processors — Stripe, for processing subscriptions and payments
• Hosting providers — for infrastructure and data storage within the EU
• Analytics — anonymized and aggregated usage data to understand product usage patterns
• Legal compliance — when required by law, court order, or governmental regulation

4. Data Storage & Security

Your data is hosted on servers located in the European Union. We use industry-standard security measures including encryption at rest (AES-256) and in transit (TLS 1.2+). Access to personal data is restricted to employees who need it to perform their duties.

We perform regular security audits and maintain practices aligned with SOC 2 Type II standards.

5. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data ("right to be forgotten")
• Data portability — Request your data in a structured, machine-readable format
• Restriction — Request that we limit how we use your data
• Objection — Object to processing of your data for certain purposes

To exercise any of these rights, contact us at privacy@apitrinity.com. We will respond within 30 days.

6. Cookies

We use the following types of cookies:

• Essential cookies — Required for the Service to function (session management, authentication). These cannot be disabled.
• Analytics cookies — Help us understand how visitors interact with the Service. These are opt-in and can be disabled via our cookie banner.

We do not use advertising or tracking cookies.

7. Third-Party Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

8. Children's Privacy

ApiTrinity is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at privacy@apitrinity.com and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email or through a notice on the Service at least 30 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@apitrinity.com
• Contact form: apitrinity.com/contact
• Address: ApiTrinity B.V., Amsterdam, The Netherlands