RPI1. Who this applies to
This Privacy Policy explains how RPI, a sole proprietorship based in Chicago, Illinois (“RPI,” “we” or “us”), handles personal information on our website and in the RPI platform, Fuel Price Feed API and related services (the “Services”). Our Services are built for businesses, so most of the personal information we hold is business contact information about people at our prospects and customers.
2. Information we collect
Information you give us
- Demo requests. When you use the form on our website: your name, company, work email, the size of your location network, what you are interested in, and anything you write in the message box.
- Customer accounts. For customer users: company name, your email address, role, and sign-in credentials. Passwords are stored only as salted, one-way hashes, not in readable form.
- Customer content. Settings you create in the platform, such as competitor selections, trade areas, notes and alert rules.
- Messages. Anything you send us by email.
Information collected automatically
- Technical data with demo requests: IP address, browser type (user agent) and the site that referred you, used for security and to prevent abuse.
- Server logs: IP address, date and time, requested address and response code for each request to our servers.
- API usage: for each API key, the number of requests per endpoint per day, and when the key was last used. API keys themselves are stored only as a one-way hash plus a short display prefix.
- Cookies: when you sign in we set a session cookie to keep you signed in. It is strictly necessary for the Services to work. Our marketing site does not currently use advertising or analytics cookies.
- Fonts: our website loads fonts from Google Fonts, so your browser sends your IP address to Google when you view the site.
3. How we use information
- To respond to demo requests and other messages, and to communicate with you about the Services;
- To provide, operate, secure, support and improve the Services, including creating accounts and API keys and enforcing usage limits;
- To detect and prevent fraud, abuse and security incidents;
- To bill customers and keep business records, and to meet legal obligations.
We do not sell personal information, and we do not use it for targeted advertising.
4. Who we share it with
We share personal information only as needed to run the Services:
- Service providers that host or deliver the Services on our behalf, including Amazon Web Services (hosting and database), Cloudflare (network delivery and security), and our email provider, who may process it only for us.
- Legal and safety: where we believe disclosure is required by law or legal process, or necessary to protect rights, safety or security.
- Business transfers: in connection with a merger, financing, acquisition or sale of assets, subject to this policy.
- With your direction or consent.
5. How long we keep it
We keep information only as long as needed for the purposes above. As a guide: demo requests for up to 24 months after the last contact; customer account data while the account is active and for a reasonable period afterward for records and disputes; server logs for up to 30 days. We may keep information longer where the law requires or to resolve disputes and enforce our agreements.
6. Security
We use reasonable technical and organizational measures to protect personal information, including encrypted connections to our website, hashed credentials, role-based access controls and rate limiting. No system is perfectly secure, and we cannot guarantee absolute security. Please use a strong, unique password and keep API keys confidential.
7. Your choices and rights
You can ask us to access, correct or delete personal information we hold about you, or to stop sending you communications, by emailing [email protected]. Depending on where you live, you may have additional rights under local law, such as the right to know what we collect, to correct or delete it, and to not be discriminated against for exercising these rights. We will respond as required by applicable law and may need to verify your identity first. Customer users should usually contact their own company administrator as well, because their company controls their account.
8. Children
Our Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.
9. Where information is processed
We operate in the United States and information may be processed and stored there. If you access the Services from elsewhere, you understand your information will be transferred to the United States.
10. Links and third parties
Our site may link to other websites. We are not responsible for their privacy practices; please read their policies.
11. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new “last updated” date and, for material changes, notify customers by email or in the Services.
12. Contact us
RPI
Email: [email protected]