Last updated: January 2025

1. Introduction

Refyne ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web extraction API service.

We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Account Information

When you create an account, we collect:

Email address
Name (if provided)
Authentication data (managed by our auth provider, Clerk)

Usage Data

When you use our service, we collect:

URLs you submit for extraction
Schemas you create or use
API call logs and timestamps
Token usage and billing information

Technical Data

IP address
Browser type and version
Device information

3. How We Use Your Information

We use your information to:

Provide and maintain our service
Process your API requests
Calculate billing and usage
Prevent abuse and enforce rate limits
Improve our service
Communicate with you about your account

4. Data Sharing

We share data with the following third parties to provide our service:

LLM Providers (e.g., OpenRouter, Anthropic, OpenAI) - We send webpage content to these providers for data extraction. If you use your own API keys (BYOK), requests go directly to your chosen provider.
Clerk - Authentication and user management
Stripe - Payment processing (we do not store card details)

We do not sell your personal data to third parties.

5. Data Retention

We retain your account data for as long as your account is active. Usage logs and extraction results are retained for up to 90 days for debugging and billing purposes. You may request deletion of your data at any time.

6. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Request deletion of your data
Object to processing
Data portability
Withdraw consent

To exercise these rights, please contact us at the address below.

7. Security

We implement appropriate technical and organisational measures to protect your data, including:

Encryption of API keys at rest
HTTPS for all data transmission
Access controls and authentication

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: [email protected]