Privacy Policy

Effective 2026-04-01

Apinizer is a self-managed platform — the data your platform processes never leaves your Kubernetes cluster. This policy covers only what we collect when you visit apinizer.com or talk to our team.

Scope

This Privacy Policy applies to the apinizer.com website and to direct communications with the Apinizer team (sales, support, partnerships). It does not cover the data that Apinizer the platform processes when our customers run it on their own Kubernetes — that data lives in the customer's environment, not ours.

What we collect on apinizer.com

Contact form submissions — Name, work email, company, role, phone (optional), and the message you send. Used to respond to your request and route it to the right team.
Newsletter subscriptions — Email address only. Stored until you unsubscribe.
Aggregate usage analytics — Page views, country-level location, referrer. We use privacy-respecting analytics (Plausible or equivalent) — no cross-site tracking, no third-party advertising cookies.

What the platform does NOT do

Apinizer the platform — the gateway, the manager, the portal, the AI Gateway — runs on your Kubernetes cluster. The Worker carries no calls home. The Manager carries no hidden cloud dependency. The traffic logs, audit trail, configuration, and credentials all stay in the customer's cluster.

We rely on the following lawful bases:

Consent — Newsletter subscriptions and optional analytics.
Legitimate interest — Responding to your contact form, customer relationship management.
Contractual necessity — Fulfilling a signed Enterprise contract.

Your rights

Under KVKK and GDPR you have the right to: access the personal data we hold about you, correct it, delete it, restrict its processing, object to processing, and request portability. To exercise any of these rights, email privacy@apinizer.com. We respond within 30 days.

Data retention

Contact form submissions — 24 months from last interaction
Newsletter — until you unsubscribe
Aggregate analytics — 12 months, then aggregated further

Data transfers

Apinizer is headquartered in Türkiye. Our internal systems run in EU and Türkiye data centers. We do not transfer your personal data to third countries that lack an adequacy decision without appropriate safeguards.

Subprocessors

For website operations we use a small set of subprocessors — hosting (EU), email delivery (EU), analytics (privacy-respecting). A current list is available on request.

Changes

We will post any material changes to this policy here and notify existing customers by email at least 30 days before they take effect.

Contact

Questions or rights requests — privacy@apinizer.com
Data Protection Officer correspondence — dpo@apinizer.com