At a glance
- We do not write your input files or output files to disk. They are processed in memory and discarded immediately after the response is returned.
- We do not use your content to train models or for any purpose other than fulfilling your API call.
- We do not sell personal data. Ever.
- Payments are processed by Lemon Squeezy as merchant of record — we never see or store your card details.
- Auth tokens for the developer portal are stored in your browser's localStorage. We use Google Analytics (with IP anonymization) to measure page usage; we do not use advertising or cross-site tracking cookies.
1. Who we are
ConvertKr ("ConvertKr", "we", "us") operates the developer portal you are reading this on and the HTTP API at api.convertkr.com (the "Service"). You can reach us at support@convertkr.com for any privacy question.
2. Data we collect
2.1 Account data
When you sign up, we collect:
- Your email address (used to identify your account, send important notices, and reset your password).
- A salted hash of your password. We never see or store the plaintext password.
- Timestamps for account creation, last login, and email verification.
2.2 API keys
When you create an API key from the portal, we store the key's prefix and a hash of the secret, along with a label, creation timestamp, and last-used timestamp. The full secret is shown only once at creation — we cannot retrieve it afterwards.
2.3 API request logs
For each API call, we record:
- Endpoint path, HTTP status, request size in bytes, processing time in milliseconds, credits consumed.
- Timestamp of the call.
- The originating IP address (used for rate limiting, abuse detection, and security audits).
- Which API key was used.
We do not log the contents of the files you upload, the contents of the response file, or any other body data.
2.4 Files
Files you send to the API are loaded into the worker process's memory, processed, and the result is streamed back in the response. Both input and output are released from memory as soon as the response is delivered or the request errors out. We do not write files to local disk, object storage, or any other persistent location.
2.5 Billing data
Payments are processed by Lemon Squeezy, who acts as the merchant of record for every purchase. Lemon Squeezy collects your card details and billing address directly on their hosted checkout — those never touch our servers. From them we receive a customer reference, the last four digits of your card, card brand, billing country, the amount and currency, and a link to the invoice/receipt. We store these alongside your account so we can show your purchase history and issue refunds.
2.6 Credit ledger
Every credit movement (purchase, consumption, refund, manual adjustment) is recorded in an append-only ledger tied to your account. This is required for accurate billing and audit; we retain it for as long as your account exists and for a reasonable period after closure to meet accounting and tax obligations.
2.7 Support communications
When you email support, we receive your email address, any account information you share, and the content of your message. We use it only to respond to and resolve your request.
3. How we use data
We process the categories of data above for the following purposes:
- To authenticate you and your API keys.
- To execute the operation you requested and return the result.
- To meter and bill credits accurately, and to display your usage history.
- To enforce rate limits and detect abuse (e.g. credential stuffing, scraping, attacks).
- To send transactional emails (signup, password reset, receipts, security alerts, material policy changes).
- To improve reliability and performance — aggregate, anonymized metrics about endpoint volumes, error rates, and latency.
- To comply with legal obligations, including tax and accounting requirements.
We do not use customer content (files, results) for model training, analytics, or any purpose other than fulfilling the request.
4. Legal bases (GDPR / UK GDPR)
If you are in the EEA or UK, we rely on the following legal bases:
- Contract: to provide the Service you signed up for.
- Legitimate interests: to secure the Service, detect abuse, and improve reliability.
- Legal obligation: to keep accounting records and respond to lawful requests.
- Consent: only where required for specific optional features (e.g. marketing email — we currently do not send these).
6. Data retention
- Account data: kept for the life of your account; deleted within 30 days of account closure (except where retention is required by law).
- API request logs (metadata only): retained for 90 days, then deleted.
- Credit ledger: retained for the life of your account plus 7 years for accounting/tax compliance.
- Files: never persisted — released from memory at the end of the request.
- Support emails: retained for 24 months for quality and compliance, then deleted.
7. Security
We take security seriously and apply industry-standard measures, including:
- All data in transit is encrypted with modern TLS — every page load and every API call.
- Passwords are stored using a modern, salted one-way hashing algorithm; we never see or store the plaintext.
- API keys are stored as cryptographic hashes — the secret is shown only once at creation and cannot be retrieved afterwards.
- Credit accounting is transactional and serialised per account, so concurrent requests cannot double-spend or produce negative balances.
- Each request is processed in an isolated runtime context; file bytes are released from memory the moment the response is sent.
- Internal access follows least-privilege principles, with audit logs for administrative actions.
No service can guarantee perfect security. If you discover a vulnerability, please email support@convertkr.com so we can address it responsibly.
9. Your rights
Depending on where you live, you have some or all of the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to fix inaccurate or incomplete data.
- Deletion — ask us to delete your account and associated data (subject to legal retention obligations).
- Portability — receive your data in a machine-readable format.
- Restriction — ask us to limit how we process your data.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where we rely on consent, you can withdraw it at any time.
- Lodge a complaint — with your local supervisory authority (EEA/UK) or attorney general (US states with a privacy law).
To exercise any of these rights, email support@convertkr.com from the email address on your account. We respond within 30 days.
10. California privacy rights (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect, delete it, correct it, and opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as defined under the CCPA/CPRA.
11. International data transfers
Our infrastructure is located in the United States and other regions. If you access the Service from outside those regions, your information will be transferred to and processed in countries that may have different data-protection laws. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms to protect your data.
12. Children
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
13. Changes to this policy
If we make material changes to this Privacy Policy, we will notify active customers by email and update the "Effective date" above. Older versions are available on request.
14. Contact
Privacy questions, requests, or complaints — please email support@convertkr.com or visit our contact page.