GDPR Privacy Information

Scope and Controller

Ozan Soft, the publisher of GenderAPI, is the contact for personal-data processing described here. Contact details appear below.

Data We Process

• Account data: information voluntarily supplied for an account, purchase or support request.
• Successful API queries: processed to return a result and not stored.
• Email queries: never stored.
• Unresolved queries: only queries for which no gender is found may be retained to improve GenderAPI.
• Excel and CSV files: retained for no more than five days unless the User deletes the file sooner.
• Google Sheets data: processed in real time and not stored or logged.

Purposes and Legal Bases

Data may be processed to provide the requested service and manage accounts or purchases, to meet legal obligations, and to pursue the legitimate interest of improving GenderAPI through unresolved queries. Where processing relies on consent, consent may be withdrawn at any time without affecting earlier lawful processing.

Retention

Successful query inputs and email queries are not retained. Unresolved non-email queries may be retained for up to 12 months for product improvement and are then deleted or irreversibly anonymized. Excel and CSV files are automatically deleted within five days and may be deleted immediately by the User after export.

Account data is retained while the account is active and is deleted or irreversibly anonymized within 30 days after closure or an approved deletion request, unless an exception applies. Support communications may be retained for 24 months after closure, and security or technical logs for 90 days.

Billing and transaction records may be retained for up to seven years where needed for accounting, tax, chargeback or fraud-prevention obligations. Data removed from active systems may remain in access-restricted rolling backups for up to 30 additional days. A longer period applies only where required by law or necessary for a legal claim, fraud inquiry or security investigation. See the complete schedule in our Privacy Policy.

Recipients and Processors

GenderAPI does not sell or rent personal data. GenderAPI query inputs, Excel or CSV file contents, and Google Sheets input or output data are not disclosed to third parties.

Account, billing, support, security and consent-based analytics data may be processed by service providers acting on GenderAPI’s behalf where necessary to provide the relevant function. Each provider receives only the category of information needed for its contracted purpose and is required to process it under applicable data-protection obligations.

Information may also be disclosed where required by applicable law or valid legal process, or where necessary to protect Users, GenderAPI or the public. Details about the categories of processing appear in the Privacy Policy.

Your GDPR Rights

Subject to applicable conditions and exceptions, you may request information and access, rectification, erasure, restriction, portability, or object to processing. You may withdraw consent and lodge a complaint with a competent data protection authority.

Exercise Your Rights

Email support@genderapi.io. We may request information needed to verify identity. GDPR requests are handled without undue delay and generally within one month, subject to legally permitted extensions or exceptions.