Privacy Policy

Last updated: November 8, 2025

1. Introduction

Welcome to GenderMyName ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our gender classification API service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (encrypted and hashed)
  • Account creation date

2.2 API Usage Data

When you use our API, we collect:

  • API requests and responses
  • Request timestamps
  • API key used (hashed)
  • IP addresses for rate limiting and security
  • Usage statistics (number of requests, endpoints used)

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your complete credit card information. We only store:

  • Stripe customer ID
  • Subscription status and tier
  • Billing cycle information
  • Payment history (amounts and dates)

3. How We Use Your Information

We use your information to:

  • Provide and maintain our API service
  • Process your API requests
  • Manage your account and subscription
  • Send you important service updates
  • Prevent fraud and abuse
  • Enforce rate limits based on your subscription tier
  • Improve our service quality
  • Comply with legal obligations

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely in PostgreSQL databases hosted on Railway. We implement industry-standard security measures including:

  • Encrypted connections (TLS/SSL)
  • Password hashing using bcrypt
  • API key hashing using SHA-256
  • Regular security updates and patches
  • Access controls and authentication

4.2 Data Retention

We retain your data for as long as your account is active. You can request account deletion at any time from your dashboard settings.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

  • Service Providers: With Stripe for payment processing
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Opt-out of marketing communications
  • Withdraw consent at any time

7. Cookies and Tracking

We use essential cookies to maintain your session and keep you logged in. We do not use third-party tracking cookies or analytics services that collect personal information.

8. API Data Privacy

Important: The names you submit through our API for gender classification are processed but not stored permanently. We log API requests for billing and rate limiting purposes only. The actual name data in your requests is not retained beyond temporary caching (Redis, expires in 1 hour).

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information about a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: privacy@gendermyname.com

13. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to access and receive a copy of your data
  • Right to rectify inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to lodge a complaint with a supervisory authority

Our lawful basis for processing your data is based on your consent and our legitimate interests in providing and improving our service.

14. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to deletion of personal information
  • Right to non-discrimination for exercising your rights