Privacy Policy

Who we are

Medifontis operates this website and the Medifontis API. This policy explains what personal data we process when you visit the website, create an API key, use the API or contact us.

What we collect

When you create an API key: your email address, and if you give them your name, company or project, what you are building and the countries you need. We also record the page you signed up from, your browser’s user agent and a one-way digest of your IP address, used to prevent abuse.

When you use the API: a hash of your key with short-lived per-minute request counts for rate limiting, first and last successful use dates, successful request counts and a return-within-seven-days milestone for self-serve developers. We do not store medicine search text in these measurements. Technical error logs contain no query text.

When you contact us: your email address, your name if you give it, your message and the same abuse-prevention details.

We use Google Analytics through Google Tag Manager to understand website traffic, sample-search interactions and signup completion. Google Analytics uses cookies and processes page views, browser and device information, and approximate location. We retain approved campaign labels and known referring sources with your signup; temporary attribution is stored in session storage. Advertising features and automatic form and site-search tracking are disabled. We do not send form contents, medicine searches or API keys to Google Analytics. Theme, code language and internal-testing preferences use local storage.

Why we use it

To give you API access, keep the service secure and within its rate limits, answer your messages, tell you about important changes to the API, and understand which countries and uses matter to developers.

Legal bases

We process this data to provide the service you request (contract), for our legitimate interests in security and in improving the service, and with your consent where the law requires it.

Where it is stored

Data is stored on Amazon Web Services in the United States, encrypted at rest. We do not sell personal data or share it with advertisers.

How long we keep it

We keep signup records while your key is active and for up to 24 months after its last use, contact messages for up to 24 months, and service logs for up to 30 days, unless the law requires longer.

Your rights

You can ask to access, correct, export or delete your personal data, to restrict or object to its processing, and to withdraw consent. You can also complain to your data protection authority. To exercise these rights, contact us.

Changes

We will update this page when this policy changes and, for significant changes, tell developers by email.