Privacy policy
Last updated: October 5, 2026
In short: we handle your account and billing data to provide the service and issue your receipts. We do not sell data or use it for advertising. The data of your Odoo instances is yours and runs on your servers. You can ask us to access, correct or delete your data by writing to info@apiservicesac.com.
1. Controller
The controller is API SERVICE S.A.C., RUC 20613252844, registered at Av. General José de San Martín 166, Dpto. 202, Pueblo Libre, Lima, Perú. Privacy contact: info@apiservicesac.com. We handle data under Peruvian Law No. 29733 on Personal Data Protection and its regulations.
2. Which data we handle
| Data | What for |
|---|---|
| Name, email, password (stored irreversibly hashed), language and, if you sign in with Google or GitHub, that account's identifier | Create and protect your account, write to you about it |
| Legal name, RUC, DNI, foreigner ID or passport, billing address and email | Issue electronic invoices and receipts and comply with SUNAT |
| The reference of the card Culqi keeps, the payer's email and the charge history | Charge renewals and show you your payments. We never see or store the card number |
| Organizations, members and their roles, projects, connected servers and their state, activity and console logs | Provide the service, support you and keep it secure |
| IP address, browser and technical logs | Security, abuse prevention and error diagnosis |
| What you write to us when asking for support or in the complaints book | Handle your request or complaint |
3. The data of your Odoo instances
Your Odoo instances run on your servers and their data is yours. If your plan includes backups off your server, we keep those backups on storage we contract. For that data we act as a processor: we keep it only to give it back to you, we do not look at it or use it for anything else, and we only reach it to support you with your permission or by order of an authority.
4. Why we may handle it
- To perform the contract you accepted when creating your account or buying a plan.
- To meet legal obligations, such as issuing and keeping payment receipts.
- Out of our interest in keeping the service secure and preventing fraud.
- With your consent, when we ask for it for something else, which you can withdraw at any time.
5. Who we share it with
Only with providers we need to give the service, who handle the data on our behalf:
- Culqi (Peru), to process card payments in Peru.
- Paddle (Paddle.com Market Ltd., United Kingdom), our reseller outside Peru: it receives the purchase and payment details and also handles them as a controller, under its own privacy policy.
- Cloudflare, to serve this website and the panel and manage domains.
- Resend, to send the service's emails.
- OVHcloud and storage providers, to host the platform and the backups off your server.
- GitHub and Google, only if you choose to connect or sign in with those accounts.
- The console's artificial intelligence assistants, only with what you show them while using them.
We may also hand data to an authority that requests it under the law. We do not sell personal data.
6. Transfers outside Peru
Some of these providers keep data outside Peru, for example in the United States or the European Union. We choose providers that offer adequate protection guarantees and transfer only what the service needs.
7. How long we keep it
- Account data, while the account exists. Deleting it removes the data, except what the law requires us to keep.
- Billing data and receipts, for the period tax rules require.
- Backups off your server, according to your plan's retention, and up to 90 days after a paid plan ends.
- Complaints, at least two years from when they were filed.
- Technical logs, for as long as security and diagnosis need.
8. Your rights
You can ask us for information about your data, access it, correct it, delete it or object to its handling by writing to info@apiservicesac.com from your account's email, or with a document proving your identity. We answer within the periods the law sets. If you believe we did not handle your request, you can go to the National Authority for Personal Data Protection of Peru's Ministry of Justice and Human Rights.
9. Cookies and browser storage
This website uses no tracking or advertising cookies. The panel uses a session cookie, needed to keep you signed in, and stores preferences such as the language, theme or active organization in your browser.
10. Security
We use encrypted connections, irreversibly hashed passwords, encryption of the credentials you entrust to us and restricted access to our systems. No system is fully invulnerable; if an incident affected your data, we would tell you.
11. Minors
The service is aimed at companies and professionals and is not meant for minors.
12. Changes
If we change this policy we will tell you by email before it takes effect. The version in force is the one published on this page. For the other conditions of the service, see the terms and conditions. In case of difference between this version and the Spanish one, the Spanish version prevails.