Privacy Policy - Chapybara

1. Introduction

Alpha System ("we," "our," or "us") operates the Chapybara API service ("Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information that you provide directly to us:

Account Information: Name, email address, password (encrypted), and profile information
Billing Information: Payment method details, billing address, and transaction history (processed securely through Stripe)
Communication Data: Messages you send to us, including support requests and feedback

2.2 Automatically Collected Information

API Usage Data: Request timestamps, endpoints accessed, response times, error rates, and usage patterns
Technical Information: IP addresses, user agent strings, browser type, device information, and operating system
Log Data: Server logs, security events, and system performance metrics
Cookies and Tracking: Session tokens, authentication cookies, and preference settings

2.3 Third-Party Data

We do not sell or share your personal data with third parties for marketing purposes.
We only work with trusted service providers as outlined in Section 4.

3. How We Use Your Information

We use your information for the following purposes:

Service Provision: Providing, maintaining, and improving our API services
Account Management: Creating and managing user accounts, authentication, and access control
Billing and Payments: Processing transactions, managing subscriptions, and sending billing-related communications
Security and Fraud Prevention: Monitoring for suspicious activity, preventing unauthorized access, and ensuring API security
Analytics and Optimization: Analyzing usage patterns to improve service performance and user experience
Customer Support: Responding to inquiries, providing technical support, and resolving issues
Legal Compliance: Complying with applicable laws, regulations, and legal processes
Communications: Sending service updates, security alerts, and important notices (you may opt out of marketing communications)

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers: With trusted third-party vendors who help us operate our service, including:
- Stripe for payment processing
- Cloud hosting providers for infrastructure
- Email service providers for communications
- Analytics providers for service improvement
Legal Requirements: When required by law, court order, or government request
Safety and Security: To protect our rights, property, or safety, or that of our users or the public
Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)
Consent: With your explicit consent for other purposes

5. Third-Party Data Sources and Attribution

Our Service integrates and processes data from a variety of third-party and open data sources.
We comply with all license and attribution requirements for these sources.
By using our Service, you acknowledge and agree to the following attributions and data source disclosures:

This product includes data from DB-IP, available from https://db-ip.com.
Data provided by abuse.ch (https://abuse.ch/), including URLhaus and other threat feeds.

6. Data Security and No Warranty

We use industry-standard security measures to protect your data, including:

Encryption: Data in transit is protected using TLS/SSL encryption
Access Controls: Strict access controls and authentication for our systems
Regular Audits: Regular security assessments and vulnerability testing
Data Minimization: We collect and retain only the data necessary for our services
Secure Infrastructure: Use of secure cloud hosting with enterprise-grade security

However, no method of transmission or storage is 100% secure.
We cannot guarantee the absolute security of your information.
You acknowledge that you provide your information at your own risk.

7. Data Loss and Service Availability

We are not responsible for any loss, corruption, or unavailability of your data, or for any damages resulting from service interruptions, outages, or failures.
We may suspend or discontinue the service at any time, with or without notice.

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account Data: Retained while your account is active and for 30 days after account deletion
API Usage Logs: Retained for 90 days for service optimization and security purposes
Billing Records: Retained for 7 years as required by financial regulations
Support Communications: Retained for 2 years for quality assurance

9. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Rectification: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal requirements)
Portability: Request a copy of your data in a machine-readable format
Restriction: Request limitation of processing under certain circumstances
Objection: Object to processing based on legitimate interests
Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at suporte@alphasystem.dev. We will respond within 30 days.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence.
We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions.

11. Children's Privacy

Our Service is not intended for children under 16 years of age.
We do not knowingly collect personal information from children under 16.
If you become aware that a child has provided us with personal information, please contact us, and we will take steps to remove such information.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain user sessions and authentication
Remember your preferences and settings
Analyze service usage and performance
Enhance security and prevent fraud

You can control cookies through your browser settings, but disabling certain cookies may affect service functionality.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information.
We do not sell personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
For significant changes, we may also send email notifications.
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

15. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Support: suporte@alphasystem.dev