Skip to content
APIExplore the drug reference APIExplore the drug reference APIRead the docs
EntropyAPI
Sign inGet an API key

Legal

EntropyAPI Privacy Policy

Version: 2026-10-23 · Effective: 2026-10-23

Summary (not binding; the policy below controls). We collect only what we need to run your account and plan, keep the Service secure and answer support requests. We use essential cookies only, send no marketing email and never sell your personal information.

Entropy Systems LLC ("Entropy", "we") is responsible for the personal information collected through the EntropyAPI website, dashboard, API and support.

1. What we collect

  • Account: your email address, password (stored only as a one-way hash), basic profile details if you sign in with Google, and which versions of our terms and this policy you accepted.
  • Service records: your workspaces, plan, billing dates and API key records (keys are stored as hashes), an encrypted access grant for each app you connect by signing in, and records of each API request, such as the time, key, operation called and response status.
  • Security data: IP addresses, browser and device details, sign-in events, server logs and error reports.
  • Billing: Link, our merchant of record, collects your payment details and shares with us your name, email, billing address, subscription status, and payment, refund and dispute records.
  • Support: your messages and attachments.

Never send patient or other health information. If you do, we may delete it.

2. How we use it

We use it to provide and secure the Service, manage your plan and payments, answer support requests, investigate reported problems, prevent abuse and fraud, send service notices, plan and improve the Service using aggregated usage, and meet legal, tax and accounting duties. We send no marketing email.

3. Who receives it

Service providers process it for us under our instructions: hosting, networking and security, storage and backups, authentication and databases, email and our support mailbox, error monitoring, payments, accounting and document tools, and other software we use to operate and support the Service. Link uses it as our merchant of record under its own privacy policy (https://link.com/privacy). We disclose it otherwise only when the law requires, to protect people or Entropy, to a buyer of the business after notifying you, or with your permission. We never sell it or share it for advertising. We use only essential cookies, with no analytics or tracking.

4. How long we keep it

  • Request records and server logs: 30 days
  • Error reports: up to 90 days
  • Daily usage totals: 30 days after the completed day ends
  • Monthly usage totals: 12 months
  • Security events: 1 year; while a hold is needed for a specific investigation or legal matter, we keep all security events associated with the affected account
  • Support conversations and case evidence: 12 months after the last message
  • Invoices, payments, refunds and subscriptions: 7 years
  • Records of the terms you accepted: 7 years after your account ends
  • Payment dispute evidence: 2 years after resolution
  • Other account information: while your account is active
  • Connected app grants: deleted when you revoke the app's key, and otherwise at most 30 days after last use
  • Backups containing deleted data: up to 90 days

Closing a workspace deletes its active data within 30 days, except records we must keep. Deleting your account closes all its workspaces and removes your sign-in identity within 30 days. If we restore a backup, we delete that data again.

5. Security

We encrypt data in transit, hash passwords and API keys, limit access to what each person or tool needs, and keep encrypted backups. No system is perfectly secure; report concerns to security@entropyapi.io.

6. Your rights

To get a copy of your data, or have it corrected or deleted, email support@entropyapi.io from your account email or, if you have no account, from the address you wrote to us from. We verify your identity and respond within 30 days, extendable once by 30 days if we tell you. We keep records the law requires, such as invoices, and exports exclude secrets such as API keys and passwords, and our internal security rules. A deletion request to Link about payment data cancels any subscription bought through it.

EU and UK. Our legal bases are our contract with you, legal obligations such as tax records, and our legitimate interests in security, fraud prevention and improving the Service. You may also restrict processing, receive your data in a portable format, object to processing based on legitimate interests, and complain to your data protection authority. We and our providers process data in the United States and other countries.

7. Children

The Service is not directed to children. You must be at least 18 to create an account.

8. Changes

We email account owners at least 30 days before a materially adverse change to this policy takes effect. Other changes, and those the law requires, take effect when published with a new version date.

9. Contact

Entropy Systems LLC, 301 Worthington Terrace, 1st Floor, Wynantskill, NY 12198, USA