Privacy policy.

Effective 12 October 2026.

Information we use

We store account email, workspace details, password hashes, API key hashes, membership and billing references, and usage/security logs. When you connect Telegram, we store your Telegram identifiers and interaction records to provide the bot. API logs include route, timestamp, key prefix, user agent and a hashed IP address. Operational error records may include your email.

Payments and service providers

Stripe processes payment details and supplies subscription and invoice references. Apipunt does not store full card numbers. Cloudflare hosts the website, database and service infrastructure. Email delivery uses Resend or Cloudflare; Telegram handles bot messages. These providers may process information outside Australia.

Cookies and retention

A secure session cookie keeps you signed in for up to 24 hours. Operational event logs are normally retained for 30 days. Account and billing records are retained as needed to provide service, resolve billing issues and meet applicable obligations. Daily published selection archives are product data and remain available according to membership.

Your choices

You can update contact details, revoke keys, and cancel billing. Contact support@apipunt.com to request access, correction or deletion of personal information, or to raise a privacy concern.