Privacy Policy

Information you provide

When you join the waitlist, create an account, contact us, or use the Services, you may give us: your name, email address, company or team name, job role, account credentials, and the contents of any message you send us. If paid plans are introduced, billing details would be handled by our payment processor rather than stored by us directly.

Content you upload

The Services exist to host your API documentation. When you import or create content — for example, OpenAPI, Swagger, or Postman specifications, endpoint descriptions, comments, and related files — we store and process it to provide the Services to you and your team. You control this content and can edit or delete it.

Information collected automatically

Like most websites and apps, we automatically collect certain technical data when you use the Services, which may include your IP address, browser and device type, operating system, referring pages, and information about how you interact with the Services (such as pages viewed and actions taken). This helps us keep the Services secure, working, and improving.

We use personal information to:

• Provide, operate, and maintain the Services, including hosting and syncing your documentation
• Create and manage your account and authenticate your access
• Respond to your messages, requests, and support questions
• Send service-related communications, and — where you've opted in — product updates
• Run the AI review features that analyze your APIs for inconsistencies and gaps
• Monitor usage to maintain security, prevent abuse, and debug problems
• Understand how the Services are used so we can improve them
• Comply with legal obligations and enforce our terms

We do not sell your personal information.

Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases: your consent (which you can withdraw at any time); performance of a contract with you; our legitimate interests in operating and improving the Services in a way that doesn't override your rights; and compliance with our legal obligations.

We share personal information only in these situations:

• Service providers. Vendors who host our infrastructure, send email, process payments, or provide analytics, acting on our instructions under contract.
• Your team. Content and activity within a shared workspace are visible to the members you invite, according to the permissions you set.
• Legal and safety. Where we believe disclosure is needed to comply with law, enforce our terms, or protect the rights and safety of people or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, in which case we'll take reasonable steps to protect your information and notify you of any change.

We use cookies and similar technologies for essential functions (like keeping you logged in) and for analytics that help us improve the Services. On this website we use Google Analytics to understand page views and how visitors use calls-to-action. Most browsers let you refuse or remove cookies in their settings; doing so may affect how parts of the Services work. You can also learn more about Google's practices at Google's Privacy Policy.

We retain personal information for as long as your account is active or as needed to provide the Services, and afterwards only as required to meet legal, accounting, or reporting obligations. When we no longer have a legitimate need to keep it, we delete or anonymize it; where that isn't immediately possible (for example, in backups), we securely isolate it until deletion is.

We implement appropriate measures designed to protect your information, including encryption in transit, access controls, and regular review of our practices. That said, no method of transmission or storage is completely secure, and we can't guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.

The Services are intended for professional use and are not directed to anyone under 18. We do not knowingly collect personal information from children. If we learn that we've collected such information, we will delete it. If you believe a child has provided us information, contact helloendrel@gmail.com.

Depending on where you live, you may have the right to access the personal information we hold about you, correct inaccuracies, request deletion, object to or restrict certain processing, and receive a portable copy of your data. You can exercise these rights by emailing helloendrel@gmail.com. You can unsubscribe from marketing emails at any time using the link in the email; we may still send essential service messages. If we relied on your consent, you can withdraw it at any time without affecting earlier processing.

EEA & UK. You have the rights described above under the GDPR and UK GDPR, and the right to lodge a complaint with your local data protection authority.

California. If you're a California resident, you may request the categories and specific pieces of personal information we've collected, request deletion, and opt out of any "sale" or "sharing" of personal information. We do not sell personal information. We won't discriminate against you for exercising these rights.

India. If you're in India, you may have rights under the Digital Personal Data Protection Act, including access, correction, and erasure of your personal data, and the ability to nominate someone to exercise your rights. Contact us to make a request.

Some browsers offer a "Do-Not-Track" (DNT) signal. Because there is no common standard for how to respond to DNT, we do not currently change our practices in response to these signals. If a standard is adopted, we'll update this policy accordingly.

We may update this Privacy Policy as the Services and applicable laws evolve. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you. We encourage you to review it periodically.

For any questions about this policy or your personal information, reach us at:

• Email: helloendrel@gmail.com
• Web: www.endrel.com