Privacy Policy

Who is responsible

apiuikit Platform at app.apiuikit.com is operated by Mohammed Mehdi and Azeez Elegbede, who are responsible for the personal data described here. Contact us at contact@apiuikit.com.

What we collect

• Account data — your email address and a hashed password (or sign-in details from the provider you log in with).
• Your content — the API specifications, project settings, branding and custom domains you add. If you connect GitHub, we access only the repositories you grant our GitHub App, to read your spec file and deploy it.
• Billing data — your plan, subscription status and invoices. Card and payment details are collected and stored by Dodo Payments, never by us.
• Usage data — counts of AI chat responses (with token totals) and MCP tool calls per project, used to enforce plan limits and show you analytics.
• Docs-site visitors — questions visitors type into AI chat are sent to our AI provider to generate an answer; we don’t store the conversation. Visitors’ IP addresses are used briefly for rate limiting and are not kept with your project data.

How we use it

Only to run the service: to sign you in, host and deploy your docs, answer AI chat questions, enforce plan limits, process subscriptions, send account and billing emails, and prevent abuse. We do not sell your data or use it for advertising, and we do not use your content to train AI models.

Who processes it

We rely on these providers, each handling data only to provide their part of the service:

• Supabase — authentication and database
• Vercel — hosting, docs sites and custom domains
• Dodo Payments — checkout, subscriptions, invoices and tax (merchant of record)
• OpenAI — generating AI chat answers from your docs
• Upstash — rate limiting
• GitHub — repository sync, when you connect it

Some of these providers store data outside your country, including in the United States.

Cookies

We use only the cookies needed to keep you signed in; your light/dark theme choice is kept in your browser’s local storage. We don’t use advertising or third-party tracking cookies.

Retention and deletion

We keep your data while your account exists. Deleting a project removes it and its deployments. To delete your whole account, email contact@apiuikit.com and we’ll delete it within 30 days, except billing records we must keep by law.

Your rights

You can ask us to access, correct, export or delete your personal data, or object to how we use it, by emailing contact@apiuikit.com. We’ll respond within 30 days.

Changes

If we change this policy in a material way, we’ll tell you by email or in the app before the change takes effect.