Legal

Privacy Policy

Last updated: May 2026

Fedha API ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

When you use Fedha API, we may collect:

2. How We Use Your Information

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Isolation & Security

Each tenant's data is logically isolated by a unique tenant ID. No tenant can access another tenant's accounts, journal entries, or reports. API keys are stored in hashed form and are not recoverable after creation.

Data is stored on Neon PostgreSQL with encryption at rest. All API traffic is served over HTTPS.

4. Data Retention

Tenant data is retained for the duration of the active API relationship. Upon written request, we will delete your tenant's data within 30 days. Logs may be retained for up to 90 days for security and debugging purposes.

5. Third-Party Services

We use the following third-party infrastructure providers:

6. Cookies

The Fedha API website does not use tracking cookies. Vercel Analytics may collect anonymised, aggregate page-view data (no personal identifiers).

7. Your Rights

You may request access to, correction of, or deletion of your tenant data at any time by contacting us. See the contact page to reach us.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the API after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Use the contact page.