Privacy policy
How MandAPI collects, uses, protects, and shares personal data.
Source policy updated September 2, 2026.
1. Data processed
We may process registration and contact data, account identifiers, authentication logs, keys and settings, IP addresses, device information, technical request logs, models used, token counts, amounts charged, orders, and payment status. We do not store full card numbers; payment data is collected directly by the provider shown at checkout.
2. Purposes
We use data to create and secure accounts, provide and measure the service, calculate usage, process purchases, prevent fraud and abuse, answer support requests, meet legal obligations, and improve security and performance.
3. Legal bases
As applicable, processing rests on contract performance, legal obligations, regular exercise of rights, fraud prevention, legitimate interest with impact assessment, and consent where required.
4. API content
Requests may be forwarded to the model providers needed to generate a response. Do not send sensitive personal data, secrets, or information you are not authorized to process. Operational records are limited to what is needed for security, billing, diagnosis, and legal obligations.
5. Sharing and transfers
Data may be shared with infrastructure, security, communication, AI model, and payment providers strictly to perform their functions. Some operate outside Brazil; in those cases we use contractual mechanisms and appropriate measures required by applicable law.
6. Retention and security
We keep data as long as needed to provide the service, meet legal obligations, resolve disputes, and prevent fraud. We apply technical and organizational controls proportionate to risk, including encryption in transit, credential segregation, access control, and audit logs.
7. Your rights
Under the LGPD and other applicable rules, you may request confirmation, access, correction, anonymization, blocking, deletion, portability, information on sharing, and review of automated decisions where applicable. Some data may be retained for legal obligations or the regular exercise of rights.
8. Cookies, sessions, and audience measurement
We use essential cookies and local storage for login, security, preferences, and dashboard operation. We use cookie-free Cloudflare Web Analytics for aggregate audience measurement; it does not create persistent identifiers, track browsing across other sites, or serve advertising or profiling. Appropriate controls will be provided for any future nonessential features.
9. Privacy requests
Email [email protected] with “Privacy” in the subject and enough information to verify the account securely.
Contact →