Privacy Policy

payloadly's tools run entirely inside your web browser. The documents, files, and text you paste into a converter, formatter, or validator are processed on your own device and are never uploaded to, logged by, or stored on our servers. We collect only the limited account and billing information needed to operate the optional paid API, described below.

Every tool on payloadly is implemented in JavaScript that executes locally in your browser. When you convert, format, or validate data, that data stays on your device. We do not receive it, and it does not travel across the network. This is a core design choice, not a setting you have to enable.

We collect personal information only when you choose to use the paid API:

• Account email address. If you subscribe to the API, we store your email so we can send a passwordless sign-in link and associate your API key with your account.
• Billing information. Payments are processed by Stripe. We do not store your card details; Stripe provides us with a customer identifier and subscription status.
• API usage metadata. To enforce rate limits and prevent abuse, we temporarily record request counts associated with an IP address or API key. This does not include the content of your requests.
• Standard server logs. Our hosting provider may log basic technical information (such as IP address, timestamp, and requested URL) for security and reliability.

We use a single first-party cookie to keep you signed in to your account. We do not use advertising or cross-site tracking cookies.

We rely on a small number of trusted providers to run the service:

• Vercel for website hosting.
• Supabase for the account and billing database.
• Stripe for payment processing.
• Resend for sending sign-in emails.

These providers process data only as needed to deliver their part of the service and under their own privacy commitments.

We keep account and billing records for as long as you maintain an account, and as required to meet legal and accounting obligations. Rate-limit counters are short-lived and reset regularly. You can request deletion of your account at any time.

You may request access to, correction of, or deletion of the personal information associated with your account by contacting us. Because the browser tools do not send us your data, there is nothing on our side to retrieve or delete for that usage.

We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.

Questions about privacy? Email us at payloadlysupport@gmail.com. See also our Terms of Service.