Privacy Policy

This policy explains what WeBuyAPI (“we”, “us”) collects when you use WeBuyAPI, why we collect it, who sees it, and how to get it deleted. It is written to be read, not to be survived.

1. What we collect

If you submit a seller listing: the platform your credits are on, the remaining balance and currency, the credit source, expiry information, any notes you write, your email address, and optionally your phone or WhatsApp number. We also record when you accepted the terms and the version presented.

If you submit a buyer inquiry: the platform you want credits for, your budget range, optionally your company name, your email address, optionally your phone number, and any notes you write.

Automatically: standard server and security logs kept by our hosting provider, which may include IP addresses for a limited period. We use these to prevent spam and abuse.

We do not collect payment details, and we do not run advertising or cross-site tracking cookies. The site sets no marketing cookies at all.

2. Why we use it

• To review your submission manually and reply to you.
• To identify potential matches between sellers and buyers.
• To make an introduction, only after you have agreed to it (see section 3).
• To prevent fraud, spam and abuse of the Service.
• To comply with legal obligations that apply to us.

Where the law requires a lawful basis, ours is performance of a contract (handling your submission at your request) and our legitimate interests in operating and securing the Service. Where we rely on consent, for example to make an introduction, you can withdraw it at any time.

3. Who we share it with

Counterparties. We share your contact details and listing information with a prospective buyer or seller only after you have confirmed you want that introduction. We never publish listings publicly, and there is no public directory of sellers on this site.

Processors. We use a small number of service providers to run the site: Google Sheets (lead storage) and Vercel (hosting when deployed there). They process data on our instructions under their own terms. We do not sell your personal data to anyone, and we do not share it with advertisers or data brokers.

Legal. We may disclose information where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.

4. Proof of ownership

This website does not accept file uploads. If evidence is needed, we will explain what to provide and how to share it during follow-up. Never send passwords, API keys or recovery codes.

5. How long we keep it

We keep submissions for as long as needed to work on a match, and for up to 24 months afterwards so that we can answer questions about a past introduction and meet record-keeping obligations. After that we delete or anonymise them. You can ask us to delete your data sooner at any time.

6. Security

In production, submissions are transmitted over HTTPS and stored in a private Google Sheet. Access is restricted to authorized operators and the website’s service account. The sheet is not publicly shared. No system is perfectly secure.

7. Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, or receive it in a portable format. To exercise any of these, email from the address you submitted with, and we will respond within 30 days. You also have the right to complain to your local data protection authority.

8. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

9. Children

The Service is not directed at anyone under 18, and we do not knowingly collect their data. If you believe a child has submitted information, contact us and we will delete it.

10. Changes

If this policy changes materially, we will update the date above and post the new version here before it takes effect.

11. Contact

Privacy questions and deletion requests: . See also our Terms of Service.