Privacy Policy

1. Who We Are

jsondb.cloud is operated by SIA Billy, a company registered in the Republic of Latvia, located at Ulbrokas 23, Riga, Latvia. References to “we”, “us”, or “our” refer to SIA Billy.

2. Data We Collect

We collect minimal data to operate the service:

• Account data — your email address and authentication credentials, managed by our identity provider, Clerk. Their privacy policy governs how that data is handled.
• API usage metrics — request counts, response times, and error rates used to maintain service quality and enforce rate limits.
• JSON documents you store — the data you push to jsondb.cloud through the API.

We do not use cookies for tracking. We do not collect analytics beyond what is listed above.

3. How Your Data Is Encrypted

All JSON documents stored in jsondb.cloud are encrypted at rest using SQLCipher with AES-256 encryption. The encryption key is generated at build time and exists only inside the running server process — it is never written to disk, logged, or exposed through any API.

This means your stored data is physically inaccessible from outside the server. Even in the event of unauthorized disk access, raw document contents cannot be read without the runtime encryption key. No one — including us — can read your documents outside of the live server environment.

All data in transit is encrypted via HTTPS/TLS.

4. How We Use Your Data

We use your data solely to:

• Provide and maintain the jsondb.cloud service
• Authenticate your API requests
• Monitor service health and enforce usage limits
• Communicate important service updates or security notices

5. Data Sharing

We do not sell your data to third parties. We do not share your data with anyone except:

• Clerk — for authentication and account management
• Infrastructure providers — who host the service under strict data-processing agreements
• Law enforcement — only when required by applicable law

6. Data Retention

Your JSON documents are retained for as long as your account is active. If you delete your account, all associated data is permanently removed within 30 days.

7. Breach Notification

In the unlikely event of a data breach, we will notify affected users promptly via email and publish a notice on our status page.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at [email protected].

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the service after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, contact us at [email protected] or write to: SIA Billy, Ulbrokas 23, Riga, Latvia.