Privacy Policy

This policy explains what personal data API Nano and this website process, why, and what you can do about it. It applies to the API Nano desktop app, to the account services behind it and to this website.

1. Who is responsible for your data

The data controller is BasicApp®, Via Della Rinascita, Pesaro, Italy. VAT number: IT02058680410. You can contact us through the Contact page (WhatsApp: +3907211536377).

2. If you do not create an account

You can use API Nano without an account. In that case your requests, collections, folders and variables are saved only on your computer. We do not receive them.

3. Data we process if you create an account

Account data: your email address, your password (stored only as a one-way hash, never in clear), your first and last name if you give them, your language and time zone, and your license type and expiry date.

Sign in with Google: if you use it, we receive from Google your email address, name, profile picture and a Google identifier. We do not receive your Google password.

Sign in with Apple: if you use it, we receive from Apple your email address, which may be a private relay address, the name you share on first sign-in, and an Apple identifier. We do not receive your Apple password.

Consents: we record when you accepted this policy and the Terms of Service, and your choice about marketing emails, with the date and the IP address from which you gave it, as proof of consent.

Usage details: the date, IP address, operating system and app version of your last sign-in, and the device model if the app sends it.

Billing details: only if you enter them in your profile: customer type, company name, VAT number, tax code, address, SDI code and certified or invoice email.

4. Data we store if you turn on sync

Your requests and variables are encrypted inside the app, on your computer, before they are sent. We store the encrypted blocks together with an identifier, the date of the last change and whether the item is a request or a variable. We do not hold the key: it is protected by a passphrase that you choose, and by a recovery code that is shown to you once. We cannot read, recover or reset your synced data. If you lose both the passphrase and the recovery code, nobody can recover it.

Your responsibility: keeping your passphrase and your recovery code safe is up to you. Save the passphrase and copy the recovery code in a safe place, for example a password manager, as soon as the app shows it: the code is displayed only once and cannot be generated again. If you lose both, your synced data cannot be recovered, neither by you nor by us. The requests saved on each of your computers are not affected.

5. Why we process data and on what basis

To create and manage your account and provide the services you ask for (performance of a contract). To keep the service secure, prevent abuse and limit repeated sign-in attempts (legitimate interest). To send you service emails, such as the confirmation code and password reset (performance of a contract). To send marketing emails, only if you agreed (consent, which you can withdraw at any time). To comply with legal obligations, such as tax and accounting rules (legal obligation).

6. How long we keep data

We keep account data for as long as your account exists. If you ask us to delete your data, we erase your account and your synced data. Some billing records must be kept for the period required by law. Security logs are kept for a limited period.

7. Who receives data

We do not sell your data. We use providers that help us run the service, such as hosting and email delivery, who process data only on our instructions. If you sign in with Google or Apple, that provider processes your data as described in its own policy.

8. Security

Connections to our servers use HTTPS. Passwords are stored as hashes. Synced requests are encrypted on your computer before they are sent, so they stay unreadable on our servers. Repeated failed sign-in attempts are limited.

9. Cookies and this website

This website does not use tracking or advertising cookies. The pages load the Rubik font from Google Fonts, so your browser connects to Google to download it.

10. Your rights

You can ask us to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw a consent you gave. You can also complain to your data protection authority. To exercise your rights contact us through the Contact page (WhatsApp: +3907211536377).

11. Changes to this policy

We may update this policy. When we make a significant change we will tell you in the app or by email. The date at the top shows the latest version.