Privacy Policy

1. Who we are

Angolin is operated by Sylvain Rakotomalala, an independent business based in France, who is the data controller for the Service. Contact: [email protected]

2. What data we collect

• Account data. When you sign up with email, we collect your email address, your first and last name and a password, which we store only as a hash. When you sign in with Google, we receive your email address, your name and your profile picture, using only the "openid", "email" and "profile" permissions. We do not request access to any other Google data (no Gmail, Drive, contacts or calendar).
• API usage data. Your API keys, the requests you make to the API (endpoints, parameters, timestamps, response status), your quota consumption, and technical data such as your IP address.
• Communications. Messages you send us (for example feedback or support requests).
• Website analytics. We use Cloudflare Web Analytics to measure the audience of angolin.com: pages visited, referring site, country, browser and page load times. It does not use cookies or local storage, does not fingerprint you, and does not track you across other websites. We only see aggregated statistics.

We do not collect more than we need to run the Service.

3. How we use your data

• To create and secure your account and authenticate you.
• To provide the API and enforce quotas and fair use.
• To keep the Service reliable, secure and free from abuse.
• To contact you about your account, the beta, or changes to the Service.
• To improve the Service, based on aggregated usage.

Legal bases (GDPR): performance of the contract (providing the Service), our legitimate interests (security, reliability, improvement) and, where required, your consent.

4. Google user data

Angolin's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google account data only to sign you in and identify your account. We do not sell it, use it for advertising, or transfer it to third parties except as needed to operate the Service or as required by law.

5. Who we share data with

We do not sell your personal data. We share it only with the infrastructure and service providers required to run the Service (such as hosting, transactional email, and, when paid plans are available, payment processing), who process it on our behalf, or when required by law.

6. Where your data is stored and for how long

Data is stored with our infrastructure providers. We keep your account and usage data for as long as your account is active, and delete or anonymize it within a reasonable time after you close your account or ask us to delete it, unless we must keep some of it to comply with legal obligations.

7. Cookies and local storage

We do not use advertising or cross-site tracking cookies, and our website analytics run without cookies. To keep you signed in, we store a session token in your browser's local storage; it is strictly necessary for the Service and is removed when you log out. Signing in with Google loads Google's sign-in script, which may set its own cookies according to Google's policies.

8. Your rights

Under the GDPR, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a copy of it in a portable format. To exercise these rights, email [email protected]. You also have the right to lodge a complaint with the French data protection authority (CNIL).

9. Security

We use reasonable technical and organizational measures to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

10. Changes

We may update this policy. When we do, we will change the date at the top of this page and, for significant changes, notify you.

11. Contact

Questions about this policy or your data: [email protected]