Privacy policy
Version of 24 September 2026. This is a translation for convenience; if it differs from the Russian text, the Russian text applies.
This policy describes what data about the clients of https://apiauto.space the provider under the public offer (self-employed) processes and why. The data is processed to perform the agreement with the client under Russian Federal Law No. 152-FZ "On Personal Data" and is stored on servers in Russia.
What we keep
- Your Telegram ID, username and language — to run the subscription and message you in the bot.
- Orders, amounts, payment and refund statuses and the order number at the payment service — to open access and keep the accounts.
- A hash of your API key (we never store the key itself) and its prefix for lookups.
- Request and record counts per day and market — for the quota and usage.
- Your support requests in the bot and the answers to them — to help and to keep the history of the question. An API key sent as text is masked and never stored; do not send a key in a screenshot.
- Service logs (time, request path, status, internal events) — to run and protect the service.
How long we keep it
- Closed support requests — six months.
- Service logs — until newer entries push them out, usually a few weeks.
- Payment and refund records — 5 years.
- Everything else is deleted a year after your last subscription or demo access ends.
What we do not do
- We do not sell your data or pass it to anyone but the parties below.
- The site uses no cookies, loads no third-party services (analytics, external fonts, widgets) and never calls the API from your browser.
- We send no advertising: the bot only writes about your subscription, payments and requests.
- We never see or keep card or wallet details: you enter them at the payment service.
Who else is involved
- Telegram — the bot runs on it: orders and messages pass through its servers.
- Tribute — takes payments and makes refunds: it receives the amount, the order number and your Telegram ID; you choose and enter the payment method there.
- The US auction data provider receives live search parameters (make, model, years, price) — nothing about you.
Your rights
You can learn what data we keep about you, have it corrected or have it deleted — message the Telegram bot. We answer within 10 working days. Payment records cannot be deleted early: we keep them for 5 years.
Changes to this policy
A new version is published on this page, and clients with an active subscription get a message in the bot at least 7 days ahead. The policy is written in Russian; the English text is a translation for convenience.