Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, subscribe to our newsletter, or contact us for support.

• Account Information: Email address, name, and password
• Usage Data: API requests, timestamps, and usage patterns
• Technical Data: IP address, browser type, and device information
• Communication Data: Messages you send to our support team
• Mobile Number and SMS Consent: If you opt in to SMS price alerts, your mobile phone number and a record of your consent (see SMS and Mobile Messaging below)

OpenAI Plugin: ChatGPT and Codex

When you use the OilPriceAPI plugin, our remote service receives structured tool inputs such as benchmark codes, bounded history windows, contract instruments, ports, fuel grades and drilling geography. We use these inputs to return requested data and enforce existing account entitlements, quotas and abuse limits. Tool results are returned to the OpenAI host you use. OpenAI processes your conversation and those results under its own privacy terms; our plugin does not request your conversation text.

Anonymous demo requests do not require an account. If you connect an account, you provide an OilPriceAPI API key through our secure authorization form. The key is held in server memory and sent only to the OilPriceAPI service for authentication and permitted data reads. It is never placed in model responses, referral URLs or plugin analytics. OpenAI receives an opaque connection token, rather than your OilPriceAPI key. Connection credentials are removed on revocation or expiration; access tokens expire after one hour, refresh tokens after seven days, and a service restart clears the in-memory connection store. You can disconnect the plugin, revoke your API key in your OilPriceAPI account, or contact support for assistance. Reconnecting may be required after a restart.

Plugin operational events contain only the tool name, broad dataset category, outcome, duration, plugin version, result count and demo or authenticated access class. A tool call is not counted as a distinct person or research task. These events exclude API keys, prompts, raw market-data responses, customer email addresses, payment data and model-visible telemetry identifiers. Transient network information is used for security limits; infrastructure logs follow the hosting service's configured retention. DigitalOcean hosts the remote service and operational logs.

Links from the plugin use broad referral fields identifying the OpenAI plugin and dataset category. Our existing first-touch attribution store retains referral information for up to 90 days in your browser and forwards it during signup. It contains no plugin conversation or research-task identifier. Account records may associate that referral category with signup, key creation, authenticated use and subscription receipts to assess this distribution channel. Stripe processes payments under its own terms; the plugin does not collect payment details. Clear browser storage to remove local attribution, manage optional analytics through the site's consent controls, or contact [email protected] for access or deletion requests. Account and billing records follow the retention provisions below.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our API services
• Process transactions and send related information
• Send technical notices and support messages
• Monitor and analyze usage patterns to improve our service
• Detect and prevent fraud and abuse
• Comply with legal obligations

Where privacy law requires a legal basis, we rely on contract performance to provide accounts, API access, billing, and support; legitimate interests to secure the service, prevent abuse, measure product performance, and improve reliability; and consent for optional analytics and session replay where consent is required.

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• With service providers who assist us in operating our platform, including DigitalOcean, Stripe, Postmark, Microsoft Ads/Clarity, Google Analytics/Ads, PostHog, Crisp, Sentry, and other infrastructure or support providers we use to run the service
• When required by law or to protect our rights
• In connection with a merger, acquisition, or sale of assets
• With your explicit consent

SMS and Mobile Messaging

If you opt in to OilPriceAPI SMS price alerts, we collect your mobile phone number and a record of your consent: the date and time you opted in, a truncated IP address, your browser user agent, and the version of the SMS terms you accepted. We use this information only to send the price alerts and account notifications you requested, to honor opt-out requests, and to demonstrate consent where the law requires it.

We do not sell, rent, or share mobile phone numbers or SMS opt-in consent information with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers (such as our SMS delivery provider) that process it solely to deliver messages to you.

You can opt out at any time by replying STOP to any message. See the SMS Terms for message frequency, help, and opt-out details.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure data storage and processing practices

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access to your personal information
• Correction of inaccurate data
• Deletion of your personal information
• Data portability
• Objection to processing
• Withdrawal of consent

7. Cookies and Tracking

We use essential storage for security, authentication, and service operation. We use optional analytics and session-replay tools only after you make an analytics-consent choice in the banner. If you reject analytics, non-essential analytics and replay vendors remain disabled and you can still use the site. You can also clear your browser local storage to reset the consent choice.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data during such transfers, including vendor contractual commitments such as standard contractual clauses where applicable.

9. EEA, UK, and Similar Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also withdraw consent for optional analytics where consent is the basis for processing. If you are in the EEA, UK, or a similar jurisdiction, you may have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

11. Updates to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected]