At Scientifics.io, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and share information when you use our BoloDoc API service. We believe in transparency, so we've written this in plain English — no legal jargon unless absolutely necessary.

What Information We Collect

Information You Provide Directly

• Email Address: Required for account registration and communication
• Profile Data: Any data you provide in your account profile page
• API Usage Data: The searches you run and data you access through our API

Information Collected Automatically

• API Requests: Endpoints accessed, request timestamps, response codes
• Technical Data: IP addresses, browser type, operating system (for security and troubleshooting)
• Authentication Logs: Login attempts, token generation, API key usage
• Performance Metrics: Response times, error rates, system health data

How We Use Your Information

We use collected information to:

• Provide the Service: Process your API requests and deliver FBI wanted persons data
• Account Management: Manage your account, authentication, and access controls
• Billing & Payments: Process subscription payments and generate invoices
• Service Improvement: Analyze usage patterns to improve API performance and features
• Security & Fraud Prevention: Detect suspicious activity, prevent abuse, and protect against threats
• Customer Support: Respond to your questions and troubleshoot technical issues
• Legal Compliance: Meet legal obligations and respond to lawful requests
• Communications: Send important service updates, security alerts, and optional newsletters (you can opt out)

About The Data

Important: The FBI Fugitive data we provide comes from a public government source. We do not collect or create this data — we only make it more accessible through our API. This data is already public information available on FBI websites.

When you search for or records through our API, we log that activity for security and service quality purposes, but we do not share information about your specific searches with third parties except as required by law.

How We Protect Your Information

• Encryption: All data transmitted to/from our API uses TLS/SSL encryption
• Authentication: JWT token-based authentication with time-limited access
• Password Security: API keys are hashed using bcrypt (we never store plaintext keys)
• Access Controls: Role-based access limiting data exposure based on subscription tier
• Infrastructure Security: Hosted on secure cloud infrastructure with regular security updates
• Monitoring: Continuous monitoring for suspicious activity and unauthorized access attempts
• Data Minimization: We only collect information necessary for service operation

Information Sharing & Disclosure

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Period.

When We May Share Information

• Service Providers: We share data with trusted vendors who help us operate (hosting, payment processing, email delivery). They're contractually required to protect your data.
• Legal Requirements: We may disclose information when required by law, court order, or government request
• Law Enforcement: We cooperate with legitimate law enforcement investigations when legally required
• Security & Fraud: We may share information to investigate abuse, fraud, or security threats
• Business Transfers: If we're acquired or merge with another company, user data may transfer (you'll be notified)

Data Retention

• Active Accounts: We retain your data while your account is active
• API Logs: Request logs are retained for 90 days for security and troubleshooting
• Billing Records: Financial records retained for 7 years per legal requirements
• Deleted Accounts: Personal data deleted within 30 days of account closure (except records required for legal compliance)

Your Rights & Choices

You have the right to:

• Access Your Data: Request a copy of the personal information we have about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Data Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails (service-related emails cannot be opted out)
• API Key Reset: Generate new API keys at any time to revoke old ones

To exercise these rights, email us at privacy@scientifics.io. We'll respond within 30 days.

Cookies & Tracking

Our API is primarily accessed programmatically and does not use tracking cookies. Our website uses minimal session cookies for authentication purposes only. We do not use third-party advertising or analytics cookies.

Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If you believe we've inadvertently collected data from a minor, contact us immediately and we'll delete it.

International Users

Our services are hosted in the United States. If you access our API from outside the US, your data will be transferred to and processed in the United States. By using our service, you consent to this transfer.

Changes To This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We'll notify you of significant changes via email or prominent notice on our website. Continued use of our service after changes constitutes acceptance of the updated policy.