Privacy Policy

This policy explains what WeBuyAPI (“we”, “us”) collects when you use WeBuyAPI, why we collect it, who sees it, and how to get it deleted. It is written to be read, not to be survived.

1. What we collect

If you submit a seller listing: the platform your credits are on, the remaining balance and currency, the credit source, expiry information, any notes you write, your name, your email address, and your WhatsApp number. We also record when you accepted the terms and the version presented.

If you submit a buyer inquiry: the platform you want credits for, your budget range, your name, optionally your company name, your email address, your WhatsApp number, and any notes you write.

Automatically: standard server and security logs kept by our hosting provider, which may include IP addresses for a limited period. We use these to prevent spam and abuse.

We do not collect payment details, and we never build an advertising profile of you or sell your data to anyone.

Advertising measurement. We advertise this site, and we measure which adverts lead to a submission using Google Ads. That uses Google advertising cookies. In the UK, the EEA and Switzerland those cookies are denied by default and set only if you choose Accept on the banner; everywhere else they are on and you can opt out at any time by clearing this site’s data in your browser. What we send is limited on purpose: the platform name and a coarse budget bracket, never your name, email, WhatsApp number, company, notes, credit balance or the amount involved. Nothing that could identify or value you individually reaches an ad network.

2. Why we use it

• To review your submission manually and reply to you.
• To identify potential matches between sellers and buyers.
• To make an introduction, only after you have agreed to it (see section 3).
• To prevent fraud, spam and abuse of the Service.
• To comply with legal obligations that apply to us.

Where the law requires a lawful basis, ours is performance of a contract (handling your submission at your request) and our legitimate interests in operating and securing the Service. Where we rely on consent, for example to make an introduction, you can withdraw it at any time.

3. Who we share it with

Counterparties. We share your contact details and listing information with a prospective buyer or seller only after you have confirmed you want that introduction. We never publish listings publicly, and there is no public directory of sellers on this site.

Processors. We use a small number of service providers to run the site: Google Sheets (lead storage) and Vercel (hosting when deployed there). They process data on our instructions under their own terms. We do not sell your personal data to anyone, and we do not share it with advertisers or data brokers.

Legal. We may disclose information where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.

4. Proof of ownership

This website does not accept file uploads. If evidence is needed, we will explain what to provide and how to share it during follow-up. Never send passwords, API keys or recovery codes.

5. How long we keep it

We keep submissions for as long as needed to work on a match, and for up to 24 months afterwards so that we can answer questions about a past introduction and meet record-keeping obligations. After that we delete or anonymise them. You can ask us to delete your data sooner at any time.

6. Security

In production, submissions are transmitted over HTTPS and stored in a private Google Sheet. Access is restricted to authorized operators and the website’s service account. The sheet is not publicly shared. No system is perfectly secure.

7. Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, or receive it in a portable format. To exercise any of these, email webuyapi@gmail.com from the address you submitted with, and we will respond within 30 days. You also have the right to complain to your local data protection authority.

8. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

9. Children

The Service is not directed at anyone under 18, and we do not knowingly collect their data. If you believe a child has submitted information, contact us and we will delete it.

10. Changes

If this policy changes materially, we will update the date above and post the new version here before it takes effect.

11. Contact

Privacy questions and deletion requests: webuyapi@gmail.com. General questions can also go to our WhatsApp line, +1 (650) 719-8620. A deletion request still needs to come from the email address you submitted with, so that we are not acting on someone else's behalf. See also our Terms of Service.