Privacy Policy

Effective date: March 11, 2026  ·  Operated by RIC Services

This Privacy Policy describes how TradeFacts.io ("we", "us", or "our"), operated by RIC Services, collects, uses, and protects information when you use our website and API service (the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

• Account information: When you request a trial or subscribe, we collect your name, email address, company name, and intended use case.
• API usage data: We log API requests including endpoint called, timestamp, IP address, and response status. This data is used for rate limiting, abuse prevention, and service improvement.
• Payment information: Payments are processed by Stripe. We do not store credit card numbers or payment details on our servers. Stripe's privacy policy governs the handling of your payment data.
• Website analytics: We use Google Analytics (Measurement ID: G-TZCTVEWZMQ) to collect anonymized usage statistics including pages visited, referral sources, and session duration. IP addresses are anonymized. We also analyze nginx access logs for traffic patterns.
• Communications: If you contact us by email, we retain that correspondence.

2. How We Use Your Information

We use collected information to:

• Provision and manage your API key and account
• Send transactional emails (trial confirmation, key delivery, billing receipts, trial sequence emails)
• Monitor service health and investigate abuse or unauthorized access
• Improve the Service based on usage patterns
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Retention

Account information is retained for the duration of your account plus 12 months after closure, unless a longer retention period is required by law. API request logs are retained for 90 days. You may request deletion of your account data at any time by emailing [email protected].

4. Cookies and Tracking

Our website uses cookies for Google Analytics. These are analytics cookies only — we do not use advertising or tracking cookies. You may disable cookies in your browser settings; this will not affect access to the API.

5. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

• Stripe — payment processing
• Google Analytics — website analytics
• Resend — transactional email delivery
• DigitalOcean — cloud infrastructure (data hosted in Canada/US regions)
• Cloudflare — DNS, CDN, and DDoS protection

6. Security

API keys are stored hashed. All data in transit is encrypted via HTTPS (TLS). We use environment-level secrets management — credentials are never stored in application source files. We monitor for unauthorized access via UptimeRobot and nginx log analysis.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise these rights, email [email protected]. We will respond within 30 days.

8. Children's Privacy

The Service is intended for business and developer use only. We do not knowingly collect personal information from individuals under 18 years of age.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to active account holders. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

11. Contact

Privacy questions or requests? Email us at [email protected].