Privacy Policy

This Privacy Policy explains how Split Labs LLC (“we,” “us,” “our”) collects, uses, stores, and protects personal information in connection with the Playbook API service, including our website (playbook-api.com), API endpoints (api.playbook-api.com), documentation, developer dashboard, authentication systems, marketing materials, and any other services that link to this notice (“Services”).

If you have questions or concerns, contact us at support@playbook-api.com.

Summary of key points

Here is a quick summary of important points:

• We collect personal information that you provide to create an account, use the API, or contact us.
• We also automatically collect device and usage information, API request logs, and how you arrived at our site.
• We do not store full payment information — payments are handled by Stripe.
• We use your information to operate the API, manage billing, secure accounts, and improve the service.
• We may share data with service providers that run the Services (hosting, network security, email delivery, payments) and for legal reasons.
• We do not sell your personal information or share it for targeted advertising.
• You may have rights depending on your location (GDPR, CCPA, etc.).
• You may request access, correction, or deletion of your data.

Table of contents

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On?
4. When and with Whom Do We Share Information?
5. Cookies and Tracking Technologies
6. How Do We Handle Social Logins?
7. How Long Do We Keep Your Information?
8. How Do We Keep Your Information Safe?
9. Do We Collect Information From Minors?
10. What Are Your Privacy Rights?
11. Do-Not-Track Controls
12. U.S. State-Specific Privacy Rights
13. Do We Make Updates to This Notice?
14. Contact Us
15. How Can You Review or Delete Your Data?

1. What Information Do We Collect?

Personal Information You Provide

We collect personal information when you:

• register for a dashboard account,
• request an API key,
• subscribe to a paid plan,
• contact customer support,
• join our marketing list.

This may include:

• Name
• Email address
• Billing details you give Stripe at checkout (we do not store card numbers)
• Account sign-in information (we sign you in with emailed links; there are no passwords)

Payment Information (Handled by Stripe)

We do not store your full payment details. All payments are processed securely by Stripe. Their privacy policy applies to stored card data and PCI compliance.

Automatically Collected Information

We automatically collect:

• IP address (kept in our API request logs only as a one-way hash)
• Browser type / device info (user agent)
• API request logs (time, endpoint, request parameters, response status and time, and plan usage)
• How you arrived at our site: campaign tags in the link you followed (such as utm_source) and the referring website’s domain, never the full referring address. If you create an API key, this is saved with your account.
• Cookies used for sign-in sessions, dashboard functionality, and remembering how you arrived (see section 5)

2. How Do We Process Your Information?

We process information to:

• Create and authenticate accounts
• Administer API keys
• Process billing through Stripe
• Provide customer support
• Prevent fraud and abuse (e.g., API misuse, scraping, account compromise)
• Maintain system security and rate limit enforcement
• Improve performance, diagnostics, and user experience
• Understand which channels bring new developers to the Services
• Send account and service emails (such as sign-in links, API keys, and billing notices)
• Send promotional emails with your consent; every promotional email includes a way to unsubscribe

We may also process information when necessary to protect someone's vital interests.

3. What Legal Bases Do We Rely On?

Depending on your region (EEA, UK, etc.), we rely on:

• Consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate interests (e.g., API security, analytics, feature improvement)

4. When and with Whom Do We Share Information?

We may share information with:

• Stripe — payment processing
• Network and security providers (such as Cloudflare) — delivering traffic and protecting against abuse
• Hosting providers — for database and server operation
• Email service providers — for sign-in links, account notifications, and emails you have agreed to receive

We also may share information if legally required (subpoenas, fraud investigations, etc.).

We do not sell personal information, and we do not share it for cross-context behavioral (targeted) advertising.

The Services are hosted in the United States, and your information is processed there. If you use the Services from outside the United States, your information is transferred to and processed in the United States.

5. Cookies and Tracking Technologies

We use:

• Session and sign-in cookies (account pages and the dashboard)
• An acquisition cookie (pb_attr), set on your first visit and kept for 30 days. It records the campaign tags and referring website domain described in section 1, and is copied to your account if you create an API key.

On api.playbook-api.com (the API, account pages, and dashboard) we do not use third-party advertising or analytics cookies. Pages on www.playbook-api.com are hosted by Wix, which sets its own cookies to run those pages; see Wix’s privacy policy for details.

You may disable cookies in your browser, but some features of the dashboard may not function.

6. How Do We Handle Social Logins?

We do not offer sign-in through Google, Facebook, or other social providers. You sign in with a one-time link sent to your email address. If we add social sign-in in the future, we will update this notice before it is available.

7. How Long Do We Keep Your Information?

We retain data only as long as necessary:

• Account data — until account deletion
• API request logs — 90 days, for billing accuracy, fraud prevention, and debugging, then deleted
• How you arrived at our site — with your account, until account deletion
• Billing records — as required by law

8. How Do We Keep Your Information Safe?

We use industry-standard security practices including:

• HTTPS encryption
• Network-level protection against abuse and denial-of-service attacks
• Passwordless sign-in with one-time emailed links, and access controls
• API key restriction settings (such as approved domains for widgets)
• IP addresses stored only as one-way hashes in request logs
• Database encryption at rest (platform dependent)

No system is 100% secure, but we take all reasonable steps to protect your data.

9. Do We Collect Information From Minors?

No. We do not knowingly collect information from individuals under 18. If discovered, we remove the account and delete associated data.

10. What Are Your Privacy Rights?

You may have rights under GDPR/CCPA etc., including:

• Right to access
• Right to correct
• Right to delete
• Right to withdraw consent
• Right to data portability
• Right to restrict processing

Contact us to exercise these rights. We may verify your identity by confirming the email address on your account. We respond within 45 days, and may extend that once by another 45 days where the law allows, in which case we will tell you why.

11. Do-Not-Track Controls

We do not currently respond to Do-Not-Track signals because standards have not been finalized.

12. U.S. State-Specific Privacy Rights

Residents of California, Colorado, Connecticut, Utah, Virginia, and other states may have additional rights.

Your Rights Include:

• Right to know what data is collected
• Right to access data
• Right to delete data
• Right to correct inaccuracies
• Right to opt out of targeted advertising
• Right to non-discrimination

We do not sell personal information or use it for targeted advertising, so there is nothing to opt out of today. If that ever changes, we will update this notice first.

Email support@playbook-api.com to submit requests.

Appeals. If we decline your request, you can appeal by replying to our decision with “Appeal” in the subject line. We will respond to your appeal in writing within the time your state’s law requires, generally 45 to 60 days, and explain our decision.

13. Do We Make Updates to This Notice?

Yes. We update this Privacy Policy when needed. The “Last updated” date will reflect the latest version.

14. Contact Us

Split Labs LLC / Playbook API
Email: support@playbook-api.com

15. How Can You Review or Delete Your Data?

Email us or submit a data access request to review, correct, or delete personal data.