Mr. Gecko Privacy Policy

1. Data Controller & Contact

Data Controller: Mr. Gecko
Contact email: [email protected]
Registered office: Brussels, Belgium

2. Types of Data We Collect

We collect the following categories of Personal Data, depending on how you use the API and our services:

• Account data: name, email, username, company (if provided).
• Authentication data: password hashes, API keys, tokens.
• Usage & telemetry: API request logs, IP addresses, timestamps, endpoints called, response times.
• Cookies & similar technologies: session identifiers and preferences used on our dashboard or website.
• Support and correspondence: messages and attachments you provide when contacting support.

3. How We Collect Data

Data is collected directly from you (e.g., when you register, create API keys, or contact support) and automatically when you interact with our services (e.g., API requests, logs, cookies).

4. Purposes of Processing & Legal Bases

We process Personal Data for the following purposes:

• To provide and operate the API: authenticate users, issue API keys, serve requests, bill paid plans.
• Security and abuse prevention: detect and prevent fraud, misuse, and attacks.
• Support: respond to user inquiries and incidents.
• Analytics & performance: measure and improve our services (e.g., error rates, latency).
• Legal compliance: comply with legal obligations and respond to lawful requests from public authorities.

Legal bases: performance of contract (service delivery), legitimate interests (service security and improvement), and compliance with legal obligations.

5. Cookies & Tracking

We use cookies and similar technologies on our website and dashboard to manage sessions, remember preferences, and analyze usage. Third-party services (analytics, error reporting, CDN) may also set cookies. You may control cookie settings via your browser or dashboard preferences.

6. Third-Party Services & Data Sharing

We may share Personal Data with:

• Service providers that support our operations (host, email providers, payment processors, analytics).
• Security providers (DDoS protection, monitoring).
• Legal or government authorities when required by law.

When we share data with third parties we require appropriate contractual protections and only share the minimal data required for the purpose.

7. Data Retention

We retain Personal Data for as long as necessary to provide services, comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes (typically logs and telemetry are kept for a rolling period — e.g., 90 days for raw API logs; adjust to your policy). You can request deletion as described in section 9.

8. Security Measures

We implement administrative, technical, and physical measures designed to protect Personal Data against unauthorized access, disclosure, alteration or destruction. Examples: TLS for transport, hashed passwords, API keys, access controls, regular audits, and vulnerability management.

9. Your Rights

Subject to local law, you may have rights including:

• Access: request a copy of Personal Data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of Personal Data (subject to legal/contractual limits).
• Portability: request your data in a commonly used format.
• Object or restrict processing: where applicable.

To exercise your rights, contact us at [email protected]. We will respond in accordance with applicable law.

10. International Transfers

Data may be transferred to and processed in countries other than your residence. Where required, we use appropriate safeguards (standard contractual clauses or other mechanisms) to ensure protection of Personal Data.

11. Legal Disclosures

We may disclose Personal Data if required by law, to respond to legal processes, to protect the rights, property, or safety of Mr. Gecko, our users, or others, or to enforce our terms and conditions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. If changes are material, we will provide additional notice as required by law.

13. Contact

If you have questions or requests about this Privacy Policy or our privacy practices, contact:

[email protected]