Information processed
REST Test processes account and profile information, account memberships, workspace API definitions, saved requests, mock responses, optional captured request results, usage records and operational logs. Connected integrations can supply repository metadata and API source documents. Payment providers process payment information.
Why information is processed
Information is used to provide the features you request, authenticate users, enforce permissions and limits, process subscriptions, deliver service messages and investigate security or reliability issues. [Complete the legal basis for each purpose, including any legitimate-interest assessment or consent requirements.]
Service providers and integrations
Planned hosting uses Vercel for the frontend and Microsoft Azure for the backend. Depending on enabled features, processing can also involve Supabase, Stripe, Resend, GitHub, Google and an AI provider. AI generation sends the selected schema and scenario for processing. [Confirm the active provider list, purposes, regions, agreements and international transfer safeguards before launch.]
Cookies and browser storage
Secure HTTP-only cookies support authentication and account recovery. Browser storage keeps selected account and interface preferences. [Complete the cookie inventory, lifetimes and any optional tracking disclosures. Review consent requirements before adding non-essential tracking.]
Retention and deletion
Request history, API versions and audit records have plan-dependent retention rules. Saved content remains until removed through the available controls or an approved account data request. Backups, invoices and provider records can follow separate retention schedules. [Complete exact periods, deletion procedures and required exceptions.]
Your choices and requests
Depending on applicable rules, you can request a copy or correction of personal information, deletion, transfer, limits on processing, or object to processing. You can withdraw consent where processing relies on it and contact a supervisory authority. Use the privacy contact above; identity and access to shared account data must be verified.
Further information
General background on personal data rights is available from the European Commission. [Complete the applicable supervisory authority and the procedure for policy updates.]