Privacy Policy
Last updated 6 October 2026
Hosting Easy Ltd (“we”) runs TakeHome API and is the data controller for the personal data described here. We collect as little as we can.
What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Your email address | To issue your API key, link it to your plan and contact you about your account | Contract |
| A one-way hash of your API key (never the key itself) | To check calls are authorised | Contract |
| Usage records: which endpoint was called and when | To enforce plan limits, prevent abuse and run the service | Contract; legitimate interests |
| Stripe customer and subscription references | To manage your plan. Card details go straight to Stripe; we never see them | Contract |
| Billing records | To meet tax and accounting obligations | Legal obligation |
| Technical logs kept by our hosting provider, such as IP addresses | Security and keeping the service running | Legitimate interests |
What we don't store
The figures you send for a calculation (salary, pension, student loan and so on) are used to produce the result and are not saved by us. We don't use advertising or analytics cookies, and we don't sell or share your data for marketing.
Who processes it for us
- Supabase: database, hosted in London (UK).
- Netlify: website and API hosting. Data may be processed outside the UK, including in the US, under appropriate safeguards such as the UK International Data Transfer Addendum or the UK–US data bridge.
- Stripe: payments and subscriptions.
How long we keep it
- Account data (email, key hashes, plan): while your account is active, then up to 12 months after closure.
- Usage records: up to 24 months.
- Billing records: 6 years, as UK tax law requires.
Your rights
Under UK data protection law you can ask for a copy of your data, or ask us to correct it, delete it, restrict or object to its use, or move it to another service. Contact us at lee.day@leeday.uk. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
We'll update the date above when this policy changes, and email account holders about significant changes.