Legal

Privacy Policy

This Privacy Policy explains what information Africa API, the service operated by Assembly Labs LLC (“we”, “us”), collects, how we use it, and the choices you have. It applies to africa-api.com, the Africa API REST API, the MCP server, and the account dashboard (together, the “Service”).

Last updated

Information we collect

  • Account information. When you create an account we collect your email address and a securely hashed password. You may optionally provide a name or organization.
  • API keys and usage. We record the API keys issued to your account and metadata about the requests made with them — timestamps, endpoints called, response status, and request volume — to enforce rate limits, bill usage, and detect abuse.
  • Billing information. Paid plans are processed by Stripe. Stripe collects and stores your payment-card details directly; we never see or store full card numbers. We retain only the billing records Stripe returns to us, such as plan, status, and the last four digits of your card.
  • Technical and log data. Our servers and infrastructure providers automatically log IP addresses, browser and device type, and the pages or endpoints accessed, for security and diagnostics.
  • Cookies. The dashboard uses a small number of strictly necessary cookies to keep you signed in. The public website may use Google Analytics cookies to understand aggregate page usage. We do not use advertising or cross-site tracking cookies.

How we use information

  • Provide, operate, and secure the API, MCP server, and dashboard.
  • Authenticate your account and issue and manage your API keys.
  • Enforce plan quotas and rate limits, and bill paid usage.
  • Detect, prevent, and investigate abuse, fraud, and security incidents.
  • Respond to support requests and send essential service notices.
  • Understand aggregate usage so we can improve the Service.

We do not sell your personal information, and we do not use the content of your API requests to build advertising profiles.

Legal bases for processing

Where the GDPR or similar laws apply, we process personal data to perform our contract with you (providing the Service), to comply with legal obligations such as tax and accounting, and for our legitimate interests in operating, securing, and improving the Service.

How we share information

We share personal information only with service providers that help us run the Service, and only as needed:

  • Stripe. Payment processing and billing.
  • Hosting and infrastructure. Cloud providers that run our API, database, and dashboard.
  • Email delivery. To send account, security, and transactional messages.
  • Google Analytics. Aggregate website analytics. We configure Google Analytics without ads personalization or Google signals.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the Service. If Africa API is involved in a merger, acquisition, or sale of assets, we will notify you before your information becomes subject to a different policy.

Data retention

We keep account and billing records for as long as your account is active and as required to meet legal, tax, and accounting obligations. API request logs are retained for a limited period for security and operational analysis, then deleted or aggregated. When you delete your account, we remove or anonymize your personal data within a reasonable period, except where we are required to retain it.

Security

We protect your data with measures including encryption in transit (HTTPS/TLS), hashed credentials, scoped API keys you can revoke at any time, and access controls on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update your email, rotate or revoke API keys, change plans, and delete your account from the dashboard. For any other request, contact us at the address below; we will respond within the time required by applicable law.

You will not receive discriminatory treatment for exercising any of these rights.

International data transfers

Africa API operates online and may process and store information in countries other than your own, including where our infrastructure and service providers are located. Where required, we rely on appropriate safeguards for cross-border transfers.

Children's privacy

The Service is intended for developers and organizations and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy as the Service evolves. When we make material changes we will revise the “Last updated” date above and, where appropriate, notify you. Continued use of the Service after changes take effect means you accept the revised policy.

Contact us

Questions about this policy or your data? Email us at [email protected] and we will be glad to help.