Privacy Policy

1. Introduction

ChargedAPI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document conversion and processing service ("Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and password when you register
• Payment Information: Billing address and payment details (processed securely by Stripe)
• Uploaded Files: Documents, images, and other files you upload for processing
• Communication: Information you provide when contacting support

2.2 Information Collected Automatically

• Usage Data: API calls, conversion types, file sizes, and timestamps
• Log Data: IP address, browser type, operating system, referring URLs
• Device Information: Device type, unique device identifiers
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your file conversions and document operations
• Process payments and manage subscriptions
• Send transactional emails (account verification, password reset, billing)
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations
• Respond to your inquiries and support requests

4. File Handling and Security

4.1 File Processing

• Files are uploaded over encrypted HTTPS connections
• Files are processed in isolated, secure environments
• We do not access, view, or analyze the content of your files except as necessary to provide the Service
• AI-powered features (redaction, accessibility) process files algorithmically without human review

4.2 File Retention

• Automatic Deletion: All uploaded and converted files are automatically deleted within 24 hours
• No Backups: We do not create or retain backups of your files
• Permanent Deletion: Deleted files cannot be recovered
• No Content Analysis: We do not use your file contents for training AI models or any purpose other than providing the Service

4.3 Security Measures

• TLS/SSL encryption for all data in transit
• Encrypted storage for files at rest
• API key authentication with secure hashing
• Regular security audits and updates
• Access controls and monitoring
• Infrastructure hosted on secure cloud providers (AWS)

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in the following circumstances:

5.1 Service Providers

We use trusted third-party services to operate our business:

• Stripe: Payment processing (PCI-DSS compliant)
• AWS: Cloud infrastructure and file storage
• Email Services: Transactional email delivery

5.2 Legal Requirements

We may disclose information if required to:

• Comply with applicable laws, regulations, or legal process
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and security
• Preference Cookies: Remember your settings and preferences
• Analytics: Understand how users interact with the Service

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

7. Your Rights and Choices

You have the following rights regarding your information:

To exercise these rights, contact us at privacy@chargedapi.com. We will respond within 30 days.

8. Data Retention

• Account Data: Retained while your account is active, deleted upon account deletion
• Uploaded Files: Automatically deleted within 24 hours
• Usage Logs: Retained for up to 90 days for analytics and security
• Payment Records: Retained as required by law (typically 7 years)
• Support Communications: Retained for up to 2 years

9. International Data Transfers

Our Service is hosted in the United States. If you access the Service from outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly. If you believe we have collected information from a child under 13, please contact us.

11. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have additional rights:

• Right to object to processing based on legitimate interests
• Right to restrict processing in certain circumstances
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

Legal Basis for Processing: We process your data based on: (1) your consent, (2) performance of a contract, (3) compliance with legal obligations, and (4) our legitimate interests in operating and improving the Service.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

13. Security Breach Notification

In the event of a security breach that affects your personal information, we will notify you via email and/or prominent notice on our website within 72 hours of becoming aware of the breach, as required by applicable law. The notification will include the nature of the breach, types of data affected, and steps we are taking to address it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: