Privacy Policy

1. Controller and contact

GreeksData is responsible for the personal data processing described in this Policy.

2. Data we process

• Account data: name, email address, password hash, verification state, account role and status, sign-in timestamps and internal identifiers.
• Payment data: selected plan, amount, currency, status, dates, Stripe account route and Stripe object identifiers needed to reconcile checkout, payment, refund and dispute events.
• Access data: access status, daily limit, validity timestamps, synchronization state and the payment associated with the period.
• API key data: key identifier, limited prefix, one-way hash, status and creation, rotation or revocation dates. The complete API key is shown when issued and is not stored in recoverable form by the frontend.
• Security and operational logs: authentication attempts, hashed email or network identifiers used for rate limiting, administrative audit records, webhook metadata, service errors, request times and server logs that may include IP address and user-agent information.
• Communications: support requests and transactional delivery records when email notifications are enabled.

3. Stripe payments

Payments are completed on Stripe Checkout. Stripe receives and processes payment method and transaction data under its own privacy terms. GreeksData does not receive or store your complete card number or card security code. We receive the identifiers and status information required to confirm payment, grant access, process refunds and respond to disputes.

Read the Stripe Privacy Policy for details about Stripe's processing.

4. Why we use data

We process personal data to create and secure accounts, verify email addresses, open and reconcile payments, provide API access, enforce daily limits, synchronize authorization data, respond to support, prevent fraud and abuse, maintain auditability, comply with legal obligations and exercise or defend legal rights.

Depending on the activity and the law that applies, processing is based on performance of the contract, compliance with legal or regulatory obligations, legitimate interests in security and service operation, exercise of legal rights, fraud prevention, or consent where specifically required.

5. Sharing and service providers

Data may be shared only as needed with Stripe for payments; hosting, database, email and infrastructure providers; the separated API authorization environment; professional advisers; and public authorities when legally required. The frontend sends the API access database only the authorization snapshot needed to validate the account, validity and hashed API key.

GreeksData does not sell personal data and does not share it for cross-context behavioral advertising. Some providers may process data outside your country. Where legally required, we use recognized safeguards intended to preserve an appropriate level of protection for international transfers.

6. Cookies and third-party resources

GreeksData uses essential session cookies to keep users signed in and to protect authenticated actions. The public homepage also offers optional Google Analytics measurement to help us understand aggregate website usage. Analytics is blocked unless you expressly accept it, and it is not loaded in the customer, support, administration or payment areas.

Your analytics choice is stored in your browser under greeksdata_analytics_consent. You can reopen the cookie settings from the homepage and withdraw consent at any time. Declining or withdrawing consent does not affect account or API access. GreeksData does not use advertising cookies or sell analytics data.

Browser requests for interface assets may be sent to the configured content delivery network. If reCAPTCHA is enabled, Google may process technical and interaction data to detect automated abuse.

7. Retention

We retain data only for as long as needed for the purposes above, account operation, security, dispute handling and applicable legal or regulatory obligations. Payment and audit records may be retained for the period required to support accounting, consumer, fraud-prevention and legal claims. Data may be deleted or anonymized when it is no longer necessary, subject to lawful retention duties.

8. International privacy rights

Depending on your location and the law that applies, you may request confirmation or knowledge of processing, access, correction, deletion, anonymization or restriction, portability, information about recipients, objection to certain processing, review of consent choices and withdrawal of consent. Lawful exceptions may require us to retain or continue processing specific records.

Residents of Brazil may exercise applicable LGPD rights. Individuals in the EEA or United Kingdom may also have rights to restrict or object to processing, data portability and complaint to a supervisory authority. Residents of California and other covered US states may have rights to know, access, correct or delete data and to receive equal service when exercising privacy rights. Because GreeksData does not sell personal data or share it for cross-context behavioral advertising, there is currently no sale or advertising-sharing activity to opt out of.

Send a request from your registered email address to support@greeksdata.com. We may need to verify your identity before disclosing or changing account data. Where applicable, you may also contact the data-protection or consumer authority responsible for your location.

9. Security

We use access controls, password hashing, token hashing, signed webhook verification, CSRF protection, restricted administrative roles and other technical and organizational measures appropriate to the service. No internet transmission or storage system is guaranteed to be completely secure.

10. Children

GreeksData is not intended for children under 18, and we do not knowingly permit them to create accounts. If you believe a child has provided personal data, contact us so the request can be evaluated and appropriate action taken.

11. Changes and questions

We may update this Policy to reflect product, legal or operational changes. The current revision date appears on this page. Material changes will be communicated through an appropriate account or website channel.

Privacy questions can be sent to support@greeksdata.com.