Privacy Policy

🔑 API Key Storage

Your API keys are stored securely in our database using industry-standard hashing and encryption practices. We do not display your full API key after initial creation. If you lose your API key, you can regenerate it from your dashboard at any time.

You are responsible for keeping your API key confidential. Do not share it publicly, embed it in client-side code, or commit it to public repositories. If you believe your key has been compromised, regenerate it immediately from your dashboard.

💳 Payment Processing

All payment processing is handled by Stripe, a PCI-compliant payment processor. We do not store your credit card number, CVV, or full payment card details on our servers. Stripe handles all sensitive payment data directly under their own privacy policy and security standards.

We retain records of credit purchases including the amount, date, and associated account for billing and support purposes. You can review your purchase history from your dashboard.

📄 API Call Logs

We log API requests for the following purposes:

• Credit deduction and balance tracking
• Abuse detection and rate limit enforcement
• Usage analytics and service improvement
• Debugging and customer support

Logs include the endpoint requested, timestamp, HTTP status code, and your account identifier. We do not log the content of responses in a way that could identify individual users beyond what is necessary for the purposes above.

🤖 No AI Training Use

We do not use your API usage patterns, request data, account information, or any other customer data to train machine learning or AI models - internally or through third parties. Your usage of Festival API remains yours.

📅 Data Retention

We retain account data for as long as your account is active. API call logs are retained for up to 12 months for operational and billing purposes, then purged or anonymized. If you delete your account, we will remove or anonymize your personal data within 30 days, except where retention is required for legal or financial compliance.

🍪 Cookie Usage

We use a minimal set of cookies necessary to operate the service:

• Session cookie: Keeps you logged in to your account dashboard.
• CSRF token: Protects form submissions from cross-site request forgery attacks.

We do not use advertising cookies, third-party tracking pixels, or analytics cookies that identify individual users across sites.

👤 Information We Collect

When you create an account, we collect your email address and a chosen username or display name. We do not require a phone number or physical address. When you contact us via the contact form, we collect your name, email, and message content solely to respond to your inquiry.

💌 Contact and Questions

If you have questions about this Privacy Policy or how your data is handled, please contact us.