In short: we collect what we need to run your account and bill your usage. We do not sell personal data, this website has no trackers, and you can ask us to export or delete your data at any time.
Who we are and what this covers
Ferox Data, Inc. (Ferox, we) runs the Ferox Data API, dashboard and this website. This policy explains what personal data we collect, why, and what control you have over it.
For your account data, Ferox is the controller. For questions, write to sales@feroxdata.com.
What we collect
Account data. Your email address, name and, if you sign in with Google or GitHub, your profile picture and the ID that provider gives us. If you use a password, we store only a bcrypt hash of it.
Team data. Your team name, members and their roles, and the email addresses you send invites to.
API keys. We store a SHA-256 hash of each key plus its prefix and last four characters so you can tell keys apart. We cannot read your full key after we show it to you once.
Usage records. For each API call we log the endpoint, marketplace, status code, credits charged, latency, whether it was a cache hit, the key and user that made it, a request ID and a timestamp. We use these records for billing, the usage dashboard and fixing faults.
Billing data. Your plan, credit balance, credit history and budget settings. Stripe collects and holds your card details. We never see or store your full card number.
Monitors and webhooks. The listings you watch, the conditions you set, the webhook URLs you give us and the email addresses that receive alerts.
Messages. Anything you send us by email, such as a support request.
This website and cookies
This marketing site does not use analytics, advertising or tracking cookies. It loads fonts from Google Fonts, so Google receives your IP address and browser details when the page loads.
The dashboard stores sign-in tokens in your browser's local storage, and sets a session cookie while you sign in with Google or GitHub. These are needed to keep you signed in. We do not use them to track you across other sites.
How we use it
- To run the Service: sign you in, check API keys, meter and bill usage, and run your monitors and webhooks.
- To send service email: invites, monitor alerts, receipts and notices about your account or these policies.
- To keep the Service secure: detect abuse, enforce rate limits and investigate faults.
- To answer you when you contact us.
We do not sell personal data. We do not use your data to train AI models. We do not send marketing email unless you ask for it.
If you are in the EEA or UK, our legal bases are: performing our contract with you (running the Service), our legitimate interests (security, fixing faults, improving the Service), and legal duties (tax and accounting records).
Marketplace data
The API returns information from public marketplace pages. Some of it can relate to people, such as a seller's business name or a reviewer's display name and review text. We collect this only as marketplaces publish it, and we keep public price history for up to 365 days.
If you appear in marketplace data and want us to stop processing it, write to us. We will look at each request and remove data where the law requires it.
How long we keep it
We keep account, team and billing data while your account is open. When you close it, we delete or anonymize your personal data within 90 days. We keep invoices and credit records for as long as tax and accounting law requires.
Results from bulk jobs are deleted after 30 days.
Security
We hash passwords and API keys, sign webhook payloads, and send all traffic over HTTPS. Access to production data is limited to the people who run the Service. No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.
Your rights
Depending on where you live, you may have the right to:
- get a copy of your personal data;
- correct data that is wrong;
- delete your data;
- object to or restrict how we use it;
- receive your data in a portable format.
You can update your profile and delete API keys in the dashboard. For anything else, write to sales@feroxdata.com. We will answer within 30 days. We may need to confirm your identity first. We will not treat you differently for using these rights.
If you are in the EEA or UK, you can also complain to your local data protection authority. California residents have the rights above under the CCPA. We do not sell or share personal data for cross-context advertising.
International transfers
We and our providers may process data in the United States and other countries. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
Children
The Service is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.
Changes to this policy
We will post any update on this page and change the date at the top. If a change is material, we will email account owners before it takes effect.
Contact
Ferox Data, Inc. Write to sales@feroxdata.com, or use our contact page.