Privacy Policy
Effective Date: July 1, 2025
Introduction
This Privacy Policy describes how PartnerAPI collects, processes, and protects your personal data in compliance with applicable laws, including the GDPR.
What Data We Collect
We may collect:
- Contact and login information
- API logs, error data, and usage metrics
- Partner invitation metadata
- Feedback, support messages, and AI interaction history
How We Use Data
- To provide the Services
- To operate our AI assistant
- To troubleshoot issues and support users
- To improve platform reliability and UX
AI and Data Use
Unless opted out, we may use customer data to fine-tune and evaluate AI system performance. AI queries and documents are scoped to individual tenants and never cross shared datasets.
Lawful Basis
We process data under the following legal bases:
- Contractual necessity (providing the Services)
- Legitimate interest (platform analytics and improvement)
- Consent (for optional features like AI training or marketing)
International Data Transfers
Data may be transferred to the U.S. We rely on Standard Contractual Clauses (SCCs) for GDPR-compliant data transfers.
Your Rights (EU and EEA Residents)
You have the right to:
- Access or delete your personal data
- Correct inaccurate information
- Object to processing or restrict use
- Lodge a complaint with your local supervisory authority
Contact us: dpo@partnerapi.com
Retention
We retain personal data only as long as necessary for service delivery or legal compliance.
Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- API keys encrypted at rest via AES-256-GCM; data in transit protected by TLS; database access controls and authentication
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
Contact Us
If you have any questions about this Privacy Policy, please contact us at:
- Email: privacy@partnerapi.com
- Website: Contact form on our website
Cookie Policy
For details on how we use cookies, please see our Cookie Policy.
Subprocessors
For a list of subprocessors we engage to process personal data, please see our Subprocessor List.
Compliance
This Privacy Policy is designed to comply with applicable privacy laws, including GDPR, CCPA, and other relevant regulations.