Privacy Policy
Effective Date: [EFFECTIVE DATE]
This policy describes how LITTLEPULL (operated by NGUETOUM NGOUANE Cyrille) collects, uses, and protects data when you use the LittlePull API and website.
1. Data We Collect
- Account data: your email address and a hashed password, stored at registration.
- API keys: hashed API key secrets and associated metadata (creation date, status, credit balance). Plaintext secrets are shown once and never stored.
- Usage records: extraction job metadata (timestamps, media type, credit cost, job status). Media file content is not stored in usage records.
- Payment metadata: credit top-up amounts, dates, and payment reference IDs provided by Dodo Payments. Full card data is processed exclusively by Dodo Payments and is never transmitted to or stored by LittlePull.
2. Purpose of Collection
We collect this data solely to operate the service: to authenticate API requests, manage credit balances, process extraction jobs, and handle billing. We do not sell or share your data with third parties for marketing purposes.
3. Data Processing & Retention
Audio and image files are processed via transient pipelines. Images handled by self-hosted infrastructure are destroyed immediately after text extraction is complete.
None of the data processed through the LittlePull API is ever used to train third-party machine learning models.
Text data passed to LLM vendors for structured JSON mapping is retained by those vendors for a maximum of 30 days solely for temporary fraud and abuse prevention, after which it is permanently purged.
Account data (email, hashed password, API key records, usage records) is retained for as long as your account is active. You may request deletion at any time (see User Rights below).
4. User Rights
You have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
5. Third-Party Processors
- Dodo Payments: processes credit card payments on our behalf. Subject to their own privacy policy and data retention practices.
- LLM vendor(s): receive text content for structured JSON extraction. Text data is subject to the 30-day retention limit described above.
We do not use any third-party analytics, advertising, or tracking services on this website.
6. Cookies
We use a single session cookie (session_id) to maintain your logged-in state on the dashboard. This cookie is HTTP-only, scoped to this domain, and expires after 24 hours. We do not use any tracking or advertising cookies.
7. Contact
For privacy inquiries or data requests, contact [email protected].