Privacy Policy - API Angel

This Privacy Policy describes how NGGM Consulting ("We," "Us," or "Our"), the owner and operator of API Angel and the website www.api-angel.com (the "Website" and "Service"), collects, uses, shares, and protects your personal information. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) as a French-based entity.

By using the Website or Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Website or Service.

1. Information We Collect

We collect the following types of information:

Personal Information: When you request an evaluation, create an account, or contact us, we may collect your name, business email address, organization name, and relevant technical metadata.
Usage Data: Automatically collected technical diagnostics such as your browser type, device information, and high-level platform interactions. We emphasize that on-premises API evaluation payloads never leave your local environment.
Other Information: Any data you voluntarily provide, such as feedback or support requests.

We do not collect sensitive personal data (e.g., racial or ethnic origin, health data) and do not use intrusive tracking cookies or third-party ad beacons.

2. How We Use Your Information

We use your information for the following purposes:

To provide and maintain the Service, including managing trial keys, licensing, and access to evaluation features.
To communicate with you, such as sending technical updates, onboarding briefings, or responding to inquiries (via email or other electronic means).
To monitor and analyze aggregate technical performance to improve the Service and ensure compliance with our EULA.
To comply with legal obligations, enforce our terms, or protect our rights, users, or third parties.
For professional security communications, with your consent (you can opt out at any time).

We process your data based on legal grounds such as your consent, contract performance (e.g., providing the Service), or legitimate interests (e.g., security).

3. Sharing Your Information (Recipients)

We may share your information with:

Service Providers: Essential infrastructure providers (e.g., European cloud hosting, communication gateways) bound by strict GDPR data processing agreements.
Legal and Regulatory Authorities: If required by law, subpoena, or to respond to government requests, or to protect against harm.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
Affiliates: Within API Angel for internal administrative and support purposes.

We do not sell your personal information to third parties. For any international transfers outside the EEA, we use Standard Contractual Clauses or other GDPR-approved mechanisms to ensure adequate protection.

4. Method of Communication

We primarily communicate via email for account-related matters, updates, and support. You may also receive notifications through the Service interface. For professional security updates, we obtain your explicit consent and provide an unsubscribe option in every email. If you contact us, we respond using the method you used or via email.

5. Security Measures

We implement rigorous technical, administrative, and physical security measures to protect your information:

Encryption of data in transit (TLS 1.3 / HTTPS) and at rest.
Access controls, firewalls, and regular vulnerability audits.
Strict zero outbound telemetry architecture for on-premises evaluation deployments.
Personnel trained on data protection and strictly restricted access on a need-to-know basis.

6. Your Rights

Under GDPR and other applicable laws, you have rights regarding your data, including:

Access: Request a copy of your data.
Rectification: Correct inaccurate data.
Erasure: Request deletion (subject to legal obligations).
Restriction: Limit processing in certain cases.
Portability: Receive your data in a structured format.
Objection: Object to processing based on legitimate interests.
Withdraw Consent: At any time, without affecting prior processing.

To exercise these rights, contact us at contact@api-angel.com. We respond within one month. You also have the right to lodge a complaint with a supervisory authority (such as CNIL in France).

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined (e.g., evaluation data for the duration of your evaluation plus statutory legal retention periods). Diagnostic data may be anonymized and retained for engine improvements.

8. Children's Privacy

The Service is an enterprise security platform not intended for children under 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on the Website with the updated effective date. Your continued use constitutes acceptance. For significant changes, we will notify you via email.

10. Contact Us

For questions about this Privacy Policy or your data, contact:

API Angel / NGGM Consulting
7 RUE AUGUSTE RODIN 28630 LE COUDRAY, FRANCE
contact@api-angel.com

This Privacy Policy is governed by French law, in accordance with our EULA.