Privacy policy
This policy explains what Redactly collects, why, and how long it is kept. It covers the website at bitbanger.in and the API at api.bitbanger.in.
Who we are
Redactly is a PII detection and redaction service. For the purposes of the GDPR, Redactly acts as a data processor for the documents you submit through the API, and as a controller for the limited website data described below.
What we collect
| Data | When | Purpose |
|---|---|---|
| Name, email address, and message | When you use the contact form | To reply to your enquiry. The form opens your own email client — nothing is sent to or stored on our servers. |
| Text, JSON, or CSV you submit to the API | On each API request | To perform redaction and return the result. Processed in memory and not retained. |
| API key and plan | When a key is issued | To authenticate requests. Only a hash of the key is stored. |
| IP address and request metadata | On any request | Handled by our infrastructure providers for delivery, abuse prevention, and error diagnostics. |
We do not use advertising cookies, and we do not run third-party analytics or tracking pixels on this site.
Third-party services
- Cloudflare — hosts the website and provides DNS, TLS, and network protection.
- Railway — hosts the API container and forwards requests to it.
- Google Fonts — serves the Inter typeface. Your browser requests the font directly from Google, which receives your IP address.
We do not sell personal data and do not share it with anyone else except where required by law.
Retention
Redacted documents are not stored. API key records are kept while the key is active and for as long as needed to prevent re-use after revocation. Email correspondence is kept for up to 24 months.
International transfers
Our infrastructure providers operate globally, so requests may be processed outside your country. Transfers rely on the providers' standard contractual clauses and equivalent safeguards.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. To exercise any of these, email [email protected]. You can also complain to your local data protection authority.
Children
The service is intended for business use and is not directed at anyone under 16. We do not knowingly collect data from children.
Changes
We will update the effective date above when this policy changes. Material changes will be announced on this page.