Privacy Policy

1. Who we are

This Policy describes how Gold Timo ("we", "us", "our") handles personal information in connection with the goldapi.dev website, API and related services (the "Service"). Questions about this Policy: [email protected].

2. Scope

This Policy covers personal information of visitors to our website, account holders and anyone who contacts us. It does not cover market prices, which are not personal information and are governed by our Terms of Service.

3. What we collect

Account information. Your name, email address, language, a hash of your password, your plan, the IP address you signed up from and the date of your last sign-in.

API keys. Your keys and their names. Keys are stored in full so that you can view and copy them on your account page, so treat them as secrets and disable any key you no longer use.

Payment information. The plan, period, amount and status of each payment. Payments are made through InzoPay, which handles them under its own privacy policy. We do not receive card details.

Usage data. The number of requests per key per hour and, for each place a key is used from: the website or app making the request, the browser or client details it sends, its last IP address and country, the number of requests, and when it was first and last seen.

Messages. What you send to [email protected].

4. How we use it

• Run the Service: sign-in, API keys, rate limits and plans
• Send the emails your account needs: sign-up codes, password resets and plan notices
• Answer your messages
• Detect abuse, enforce limits and investigate security incidents
• Comply with legal obligations

We do not sell personal information or share it with advertisers. We do not send marketing emails.

5. Legal bases

Where the GDPR or UK GDPR applies, we process personal information to perform our contract with you, for our legitimate interests in securing and improving the Service, and to meet legal obligations.

6. Retention

We keep your account, keys and usage data while your account exists, and delete them when your account is deleted. Payment records are kept after that for accounting and tax purposes. We do not delete inactive accounts automatically.

7. Service providers and transfers

We rely on these providers to run the Service, and your information may be processed outside your country:

• Payments: InzoPay
• Email delivery: Brevo (Sendinblue SAS, France)
• CDN and DNS: Cloudflare, Inc. (global)
• Internal notifications: Telegram, which our team may use to receive the name and email of a new account
• Hosting: our server hosting provider

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict its processing, and not to be discriminated against for using these rights. You may also complain to your data protection authority.

To use any of these rights, or to delete your account, email [email protected]. We answer most requests within 30 days and will confirm your identity before acting on an account.

9. Security

Passwords are stored as hashes. Connections to the site use HTTPS. No security system is perfect: keep your API keys confidential and tell us at [email protected] about any suspected compromise.

10. Children

The Service is not directed to children under 16. If you believe a child has given us information, email [email protected] and we will delete it.

11. Cookies

We use two cookies, both needed for the site to work: one for your signed-in session and one to protect forms. We do not use advertising or analytics cookies. You can clear or block cookies in your browser, but you will not be able to sign in without them.

12. Changes to this Policy

We may revise this Policy by posting a new version and its effective date here. Earlier versions are available on request from [email protected].

13. Contact

Gold Timo
Email: [email protected]