Privacy Policy

Effective Date: December 13, 2025

1. Introduction

This Privacy Policy describes how Foundry REST API ("we", "our", or "us") collects, uses, and protects your personal information when you use our service.

2. Information We Collect

We collect the following types of information:

Account Information: Email address and password (encrypted)
API Usage Data: API key, request counts, and usage statistics
Payment Information: Processed securely through Stripe (we do not store credit card details)
Technical Data: IP address, browser type, and access logs for security and service optimization

3. How We Use Your Information

We use your information to:

Provide and maintain the REST API service
Process subscription payments
Monitor API usage and enforce rate limits
Send important service updates and notifications
Improve our service and user experience
Protect against fraud and abuse

4. Data Sharing and Third Parties

We do not sell your personal information. We may share data with:

Stripe: For payment processing
Service Providers: Hosting and infrastructure providers (e.g., Fly.io, Redis)
Legal Requirements: When required by law or to protect our rights

5. Data Storage and Security

Your data is stored securely using industry-standard encryption. Passwords are hashed using bcrypt. API keys are stored securely and can be regenerated at any time. We implement appropriate technical and organizational measures to protect your information.

6. Your Rights (GDPR/CCPA)

You have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate information
Erasure: Request deletion of your account and data
Data Portability: Export your data in a machine-readable format
Opt-out: Unsubscribe from marketing communications

To exercise these rights, use the "Export My Data" or "Delete Account" buttons in your dashboard, or contact us at the email below.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

8. Cookies and Tracking

We use session cookies to maintain user authentication. We do not use third-party tracking or advertising cookies.

9. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or through the service.

11. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us:

GitHub: Report an Issue
Discord: Join our Discord

This is an open-source project not associated with Foundry Virtual Tabletop or Foundry Gaming, LLC.