Privacy Policy

Last Updated: June 16, 2026

At Satta Matka API, we value your privacy and are committed to protecting the developer keys, account credentials, payment records, and usage logs you generate. This Privacy Policy details the types of information we collect and how we use it.

1. Information We Collect

To provide you with secure and authenticated API access, we collect the following categories of information:

• Account Details: When you register for an API key, we collect your full name, work email address, and optional use case configuration.
• Authentication Credentials: Password hashes are cryptographically generated and stored securely. We never store plain text passwords.
• API Usage Logs: We log metadata about requests made with your API token (timestamp, request path, response code, and request duration) to enforce rate limits and track subscription quotas. We do not store payload logs or parameters of responses returned to you.
• Billing & Payment Proofs: Because we support manual UPI and bank transfers, we store payment reference numbers (UTR) and the proof screenshots you upload to verify and activate plans.

2. How We Use Your Data

Your data is used solely to maintain and deliver the API platform services, including:

• Verifying your registration and issuing developer API keys.
• Checking rate limits and request quotas (e.g. 10 req/min for free trial, 600 req/min for enterprise).
• Reviewing and approving manual payment receipts and screenshots.
• Sending transactional emails (such as registration notices and billing warnings).

3. Data Protection and Security

We implement industry-standard database protections. All data transmissions are encrypted using Transport Layer Security (TLS/HTTPS). We never sell, rent, or disclose developer details or usage logs to advertising networks or third-party data brokers.

4. Cookies & Storage

We use local storage and secure HTTP cookies to store session states (such as your authenticated login token) for accessing the developer dashboard. We do not track you across external domains.