API Privacy Policy

Last updated: August 20, 2026

This Privacy Policy describes how Quorvex collects, uses, and protects your personal information when you register for and use any Quorvex API — including the Sports Odds API, Healthcare Provider API, SEC EDGAR Financial Data API, Weather Data API, FDA Recalls API, and BLS Labor Statistics API (collectively, the "APIs"). This policy is separate from and in addition to any privacy policy governing the Quorvex Daily newsletter or other Quorvex services.

1. Information We Collect

When you register for an API key or subscribe to a paid plan, we collect the following information:

• Email address: Used to deliver your API key, send subscription confirmations, and provide support. Required for all tiers.
• Payment information: Processed entirely by Stripe. We never see, store, or transmit your credit card number, CVV, or full card details. Stripe provides us with a customer ID and subscription status only.
• API usage data: We log API requests for billing, rate-limiting, and abuse prevention. Logs include your API key, IP address, endpoint called, timestamp, and response status. We do not log or inspect the content of your specific query parameters beyond what is needed for billing and debugging.
• Account metadata: Subscription tier, plan start date, renewal date, and cancellation status.

2. How We Use Your Information

• To provision and manage your API keys and subscriptions.
• To enforce rate limits and monthly request allowances per your tier.
• To process payments and manage recurring billing through Stripe.
• To detect, prevent, and respond to abuse, fraud, or terms violations.
• To communicate with you about service changes, planned downtime, or billing issues.
• To improve API performance, identify bugs, and optimize endpoint response times.

We do not use your data for targeted advertising, behavioral profiling, or selling to third parties.

3. Data Storage

Your email address and account metadata are stored on our servers. API usage logs are stored in a database on our VPS. Payment data is stored exclusively by Stripe — we only retain the Stripe customer ID and subscription tier. Usage logs are retained for 90 days for billing and abuse-prevention purposes, then automatically purged. Account metadata (email, tier, dates) is retained for the life of your subscription and deleted within 30 days of cancellation.

4. Third-Party Services

We use the following third-party services that may collect limited data:

• Stripe: Payment processing and subscription management. Stripe receives your payment details directly — we never handle card data. See stripe.com/privacy.
• Cloudflare: DDoS protection, TLS termination, and DNS routing. Cloudflare may log IP addresses and request metadata. See cloudflare.com/privacypolicy.

We do not use third-party advertising networks, tracking pixels, data brokers, or analytics platforms on the API endpoints.

5. API Key Data

API keys are stored as hashed values in our database. Keys are generated using cryptographically secure random generation and are unique per subscriber. We do not share API keys between accounts. If you lose your key, contact [email protected] to request a replacement — we cannot retrieve the original key but can issue a new one.

6. No Sale of Data

We do not sell, rent, or share your personal information with any third party for marketing or commercial purposes. We do not share subscriber lists, email addresses, or usage data with sportsbooks, DFS platforms, healthcare organizations, advertisers, or data brokers. Your email address is used solely for account management and support communication.

7. Data Retention

• API usage logs: 90 days, then automatically deleted.
• Account metadata: Retained while subscription is active. Deleted within 30 days of cancellation.
• Email address: Retained while subscription is active. Deleted within 30 days of cancellation unless you request earlier deletion.
• Payment records: Retained by Stripe per their policies. We retain only the Stripe customer ID.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you, including account metadata and usage logs.
• Correction: Request that we correct inaccurate account information.
• Deletion: Request that we delete your account and associated data. API keys will be deactivated immediately. Usage logs will be purged within 30 days. Payment records held by Stripe are subject to Stripe's retention policy.
• Export: Request an export of your usage data in CSV format.
• Cancel: Cancel your subscription at any time through Stripe or by contacting [email protected].

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

9. Cookies

The API endpoints do not use cookies. The pricing page may use essential cookies for basic functionality (such as remembering which API tab you selected). We do not use advertising cookies, cross-site tracking cookies, or third-party advertising pixels on the pricing page or API documentation.

10. Data Security

We take reasonable measures to protect your personal information, including:

• API keys stored as hashed values, not plaintext.
• TLS encryption (via Cloudflare) for all API traffic.
• Rate-limiting and IP-based abuse detection.
• Server access restricted to authorized personnel only.
• Regular security updates and patch management.

However, no method of transmission over the internet is 100% secure. We cannot guarantee the absolute security of your data. In the event of a data breach, we will notify affected users within 72 hours of discovery.

11. Children's Privacy

The APIs are not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us and we will promptly delete it.

12. International Users

The APIs are hosted in the United States. If you access the APIs from outside the U.S., your data will be transferred to and processed in the United States. By using the APIs, you consent to this transfer. Quorvex complies with GDPR data subject rights for EU/UK users, including the right to erasure, data portability, and objection to processing.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email to active subscribers at least 14 days before taking effect. Continued use of the APIs after changes are posted constitutes acceptance of the updated policy.

14. Contact

For privacy questions, data requests, or to exercise your rights, contact [email protected].