Privacy Policy

Wimberly Solutions LLC

Effective Date: May 12, 2026 Last Updated: May 12, 2026

This Privacy Policy describes how Wimberly Solutions LLC ("Wimberly Solutions," "we," "us," or "our") collects, uses, and protects information when you use our APIs, data products, and web tools ("Services"). We are an Ohio limited liability company based in Cincinnati, Ohio.

1. Information We Collect

Information you provide directly:

• Email address and contact information when you reach out to us
• Payment information processed through Stripe (we do not store raw payment card data — Stripe handles this)
• API usage preferences and configuration settings

Information collected automatically when you use our Services:

• API request logs including endpoint called, timestamp, response status, and request volume
• IP addresses associated with API calls
• Subscription tier and usage counts
• Error logs for service improvement purposes

Information from third-party platforms:

• If you access our Services through RapidAPI, we receive subscription status and usage data from RapidAPI in accordance with their terms
• GitHub usernames and public repository information used for developer outreach (public data only)

We do not collect:

• The content of the queries you submit to our screening APIs (we log that a request was made, not what was searched)
• Browsing history or behavioral tracking beyond direct API usage
• Social media data
• Sensitive personal information beyond what is necessary to operate the Services

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our Services
• Process payments and manage subscriptions
• Send transactional communications (receipts, service alerts, security notifications)
• Monitor for abuse, fraud, and violations of our Terms of Service
• Comply with legal obligations
• Communicate about material changes to our Services or terms

We do not sell your personal information to third parties. We do not use your information for targeted advertising.

3. Data Sources in Our Services

Our APIs return data sourced from official government databases. This data is publicly available and not collected from individuals who use our Services. When you submit a query to our screening APIs:

• The query itself is processed in memory and is not stored in our databases
• The response is generated from pre-loaded government data
• Request metadata (timestamp, endpoint, status code) is logged for operational purposes

We do not create profiles of the individuals or entities you search for. We do not retain search subjects' information in association with your account.

4. Information Sharing

We share information only in the following circumstances:

Service providers: We use Stripe for payment processing, Supabase for database services, Railway for application hosting, and Cloudflare for content delivery. These providers access only the information necessary to perform their services and are bound by confidentiality obligations.

Legal requirements: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers: If Wimberly Solutions LLC is acquired, merges with another company, or transfers substantially all assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

With your consent: We will share information with third parties when you have given us explicit permission to do so.

5. Data Retention

We retain API request logs for up to 90 days for operational and security purposes, after which they are deleted or anonymized.

Subscription and payment records are retained for seven years as required for tax and accounting compliance.

If you close your account or subscription, we will delete your personal information within 30 days except where retention is required by law.

6. Security

We implement reasonable technical and organizational measures to protect your information including:

• Encrypted transmission of data (HTTPS/TLS)
• Access controls limiting who can access production systems
• Regular security monitoring and credential auditing
• No storage of raw API keys or payment card data

No system is perfectly secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

7. Cookies and Tracking

Our main website (wimberly.solutions) uses minimal cookies necessary for basic functionality. We do not use third-party advertising cookies or behavioral tracking pixels.

Our API endpoints do not use cookies.

8. Third-Party Links

Our Services may contain links to third-party sites including RapidAPI, government data portals, and documentation resources. We are not responsible for the privacy practices of those sites.

9. Children's Privacy

Our Services are not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

10. Your Rights

Depending on your location, you may have rights regarding your personal information including:

• The right to access information we hold about you
• The right to correct inaccurate information
• The right to request deletion of your information
• The right to object to or restrict certain processing
• The right to data portability

To exercise any of these rights, contact us at gabe@wimberly.solutions. We will respond within 30 days.

California residents: Under the California Consumer Privacy Act (CCPA), you have additional rights. We do not sell personal information. You may request disclosure of information collected, used, or shared about you.

UK and EU residents: We process personal data in accordance with applicable data protection law. Our legal basis for processing is legitimate interests (providing the Services you requested) and contract performance. You may lodge a complaint with your local data protection authority.

11. International Transfers

Our Services are operated from the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date above and, for significant changes, by email if we have your contact information. Continued use of our Services after changes become effective constitutes acceptance of the revised policy.

13. Contact

For privacy questions, requests, or concerns:

Wimberly Solutions LLC Cincinnati, Ohio gabe@wimberly.solutions wimberly.solutions/legal/privacy