Privacy Policy

1. Overview

Papalily ("we", "us", "our") operates the Papalily API and website at www.papalily.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

We collect the following categories of information:

• Account information: Email address and any profile details provided when signing up via RapidAPI.
• API usage data: Request timestamps, target URLs submitted, prompt text, response payloads, HTTP status codes, and latency metrics.
• Billing information: Handled entirely by RapidAPI. We do not store payment card details.
• Technical data: IP addresses, user-agent strings, and request headers for security and abuse prevention.

3. How We Use Your Information

We use collected data to:

• Provide, operate, and improve the Papalily API
• Enforce rate limits and detect abuse or policy violations
• Send transactional communications (e.g., usage alerts, service updates)
• Aggregate anonymous usage statistics to improve performance and reliability
• Comply with legal obligations

We do not sell your personal data to third parties.

4. Data Retention

API request logs are retained for up to 90 days for debugging and abuse detection. Aggregated, anonymised analytics may be retained indefinitely. Account data is retained for the duration of your account and deleted upon request.

5. Third-Party Services

We use the following third-party services that may process your data:

• RapidAPI — API marketplace, authentication, and billing. Subject to RapidAPI's Privacy Policy.
• Amazon Web Services (AWS) — Cloud infrastructure hosting. Subject to AWS's Privacy Policy.

6. Cookies

The Papalily website uses minimal cookies. We may use anonymous analytics cookies to understand how visitors use the site. We do not use advertising or tracking cookies. You can disable cookies in your browser settings at any time.

7. Data Security

We implement industry-standard security measures including HTTPS, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (where applicable under GDPR)

To exercise any of these rights, contact us at aiex@outlook.com.

9. Children's Privacy

The Papalily API is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions or concerns about this Privacy Policy? Email us at aiex@outlook.com.