Controller
The controller of personal data processed as described in this Policy is JFreaks Software Solutions, operating APIFreaks from Lahore, Pakistan. Privacy enquiries: support@apifreaks.com.
Lawful Bases
Where the GDPR or UK GDPR applies, APIFreaks relies on the following bases, not on consent bundled into acceptance of the Terms:
- Contract. Creating and authenticating an account, providing the APIs and related tools, metering credits, and billing.
- Legitimate interests. Security logging, fraud and abuse prevention, enforcing the Terms, and understanding aggregate use of the website so that we can operate and improve it.
- Consent. The optional newsletter, and non-essential analytics cookies (Google Analytics and Microsoft Clarity). You may withdraw that consent at any time, without affecting processing already carried out.
- Legal obligation. Tax, accounting, and other records we are required to keep.
Collection of Information
Account
When you register or sign in, APIFreaks collects your name, email address, and password, or identifiers provided by Google if you sign in with Google. You may supply billing contact details, including address and telephone number. If you use an organization account, APIFreaks may also collect organization name, member email addresses, roles, and invitations.
Billing
Checkout on the pricing page is handled by Paddle, which acts as merchant of record. Paddle is the seller for the transaction and an independent controller for its own fraud, tax, and payment-compliance processing. APIFreaks receives plan, subscription status, credit balances, invoices, and limited payment metadata. APIFreaks does not store full card numbers.
Usage and communications
APIFreaks records time of request, endpoint, response status, credits charged, IP address, user agent, and API key, as required to operate and bill the Service. Website logs similarly include IP address, browser type, referring site, and time of request. If you write to support, use the contact form, or use in-browser chat (Crisp), APIFreaks collects the name, email, telephone number (if supplied), and the message. Newsletter subscription is optional.
API requests
Requests to the APIs may include data you submit so that the call can be fulfilled. APIFreaks processes that content to return a response and to operate, secure, and bill the Service. You are responsible for having a lawful basis to submit any personal data in API requests.
Screenshot, web-scraper, and PDF endpoints may write output files (images, HTML, PDFs, and similar) to hosted storage and return a URL. Those files are retained for up to 30 days unless you request immediate deletion (for example destroy=true on PDF tasks). Asynchronous tasks may notify a webhook URL you supply when processing completes; we send the notification to that URL and do not use it for any other purpose.
People Who Are Not Customers
Some APIs return information about people and organizations who have not signed up for APIFreaks. That includes WHOIS, Reverse WHOIS, WHOIS History, IP WHOIS, and email and phone validation. The data comes from public registration records, DNS, and similar sources used to fulfill the lookup. If that information is about you and you wish to object or to request access, correction, or deletion, email support@apifreaks.com. We will consider the request in light of the public nature of the source records and any legal obligation to retain or disclose them.
Use of Information
APIFreaks uses the information described above to provide the Service, including the APIs, dashboards, playground, utilities, and MCP server; to authenticate accounts; to meter credits; to process payments and invoices; to prevent fraud and enforce the Terms of Service; to send transactional email (including verification, receipts, failed payment notices, and notice of material changes to legal terms); to send product updates if you have opted into the newsletter, from which you may unsubscribe; and to respond to support requests and to legal obligations.
Service Providers and Other Controllers
Paddle is merchant of record and an independent controller for checkout, fraud, tax, and related payment processing, as described under Billing. Google is an independent controller for Google sign-in. Their own privacy notices apply to that processing.
APIFreaks uses other providers as processors for the Service. They process information only to perform their function for APIFreaks: hosting and file storage; Google Analytics (when you allow it); Microsoft Clarity (when you allow it); Cloudflare Turnstile on signup, login, and contact forms; Crisp for in-browser support chat; and email delivery for verification, receipts, and newsletters you have opted into.
Disclosure
APIFreaks may share personal information with employees, contractors, and affiliated companies in the JFreaks group who require it to operate the Service and who are bound to keep it confidential. APIFreaks may disclose information if required by law, or if APIFreaks believes in good faith that disclosure is reasonably necessary to protect APIFreaks, its users, or the public.
International Transfers
APIFreaks is established in Pakistan, which does not benefit from an EU adequacy decision. Service providers named above operate in other countries, including the United States and the European Union. File output from screenshot, scraper, and PDF APIs is stored in the EU (eu-central-2). Where a transfer is made to a country without an adequacy decision, it is made under the Standard Contractual Clauses those providers make available, including the UK addendum where applicable.
Retention
If you delete your account from the dashboard, account data remains for 90 days so that you may request reactivation, after which it is permanently deleted, except as stated below.
Screenshot, scraper, and PDF output files are kept for up to 30 days unless you request immediate deletion as described under API requests.
Billing and invoice records are kept as required for tax and accounting law. Usage metadata is kept as long as needed to bill, secure, and audit the Service, then deleted or aggregated. Support communications are kept as long as needed to resolve the request and for a limited period thereafter for quality and dispute purposes.
Security
The website and API are served over HTTPS (TLS). Access to personal data is limited to people who need it to operate the Service. No method of transmission or storage is completely secure.
In the event of a personal data breach we will notify affected customers and, where required by law, the relevant authority. To report a vulnerability, email support@apifreaks.com.
Your Rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of personal information (including in a portable format), to restrict or object to certain processing, to withdraw consent where processing is based on consent, and to complain to a supervisory authority. Withdrawing consent does not affect processing carried out before withdrawal.
To make a request, email support@apifreaks.com from the address on your account, or use the contact page. We may need to verify that the request is made by you.
APIFreaks does not sell personal information and does not share it for cross-context behavioural advertising. Google Analytics and Microsoft Clarity, if you allow them, measure use of our own website. You may refuse those cookies in the consent banner. If you are in California, you may also request to know, delete, or correct personal information, and to opt out of any sale or share, through the same contact details.
Children
You may not use the Service unless you are at least 13, or the age of digital consent in your country if that age is higher. If APIFreaks learns that it has collected personal information from a child below that age, it will delete that information.
Cancellation and Deletion
Cancelling a subscription from the dashboard (Deactivate at Next Period or Deactivate Now) ends the plan as described in the Terms. It does not by itself erase your account or personal data.
To delete your account, use account deletion in the dashboard, or email support@apifreaks.com. After a deletion request, data remains for 90 days and is then permanently deleted, except billing records we must keep for tax and accounting, and any data we must retain for disputes or law.
Changes
APIFreaks reserves the right to update this Privacy Policy from time to time. We will provide a one-month notice period before any material changes take effect. This notice will be communicated via email or a prominent notice on our website. Your continued use of the Service after the one-month notice period shall constitute your consent to the updated Privacy Policy. The most current version of this Privacy Policy may be reviewed on this page.
Contact
JFreaks Software Solutions (APIFreaks), Lahore, Pakistan. support@apifreaks.com. You may also use the contact page.