Privacy policy

Version of 24 September 2026. This is a translation for convenience; if it differs from the Russian text, the Russian text applies.

This policy describes what data about the clients of https://apiauto.space the provider under the public offer (self-employed) processes and why. The data is processed to perform the agreement with the client under Russian Federal Law No. 152-FZ "On Personal Data" and is stored on servers in Russia.

What we keep

  • Your Telegram ID, username and language — to run the subscription and message you in the bot.
  • Orders, amounts, payment and refund statuses and the order number at the payment service — to open access and keep the accounts.
  • A hash of your API key (we never store the key itself) and its prefix for lookups.
  • Request and record counts per day and market — for the quota and usage.
  • Your support requests in the bot and the answers to them — to help and to keep the history of the question. An API key sent as text is masked and never stored; do not send a key in a screenshot.
  • Service logs (time, request path, status, internal events) — to run and protect the service.

How long we keep it

  • Closed support requests — six months.
  • Service logs — until newer entries push them out, usually a few weeks.
  • Payment and refund records — 5 years.
  • Everything else is deleted a year after your last subscription or demo access ends.

What we do not do

  • We do not sell your data or pass it to anyone but the parties below.
  • The site uses no cookies, loads no third-party services (analytics, external fonts, widgets) and never calls the API from your browser.
  • We send no advertising: the bot only writes about your subscription, payments and requests.
  • We never see or keep card or wallet details: you enter them at the payment service.

Who else is involved

  • Telegram — the bot runs on it: orders and messages pass through its servers.
  • Tribute — takes payments and makes refunds: it receives the amount, the order number and your Telegram ID; you choose and enter the payment method there.
  • The US auction data provider receives live search parameters (make, model, years, price) — nothing about you.

Your rights

You can learn what data we keep about you, have it corrected or have it deleted — message the Telegram bot. We answer within 10 working days. Payment records cannot be deleted early: we keep them for 5 years.

Changes to this policy

A new version is published on this page, and clients with an active subscription get a message in the bot at least 7 days ahead. The policy is written in Russian; the English text is a translation for convenience.