Privacy policy
What we collect, why we collect it, and what you can do about it. This policy applies to logsapi.ng and the logsapi API.
Who we are
logsapi is an API provider for social media logs. Developers sign in with GitHub or Google, fund an account through a virtual NGN account, and buy social media logs to power their own marketplaces.
We are based in Nigeria and process data in line with the Nigeria Data Protection Regulation and the GDPR where it applies.
Information we collect
We only collect what we need to run the service. That is:
- Account information. Your name, email address, and provider identifier when you sign in with GitHub or Google. We do not store your provider password or credentials.
- Usage data. API requests, orders placed, keys created and revoked, and basic request metadata such as IP address and timestamps.
- Funding records. Funding amounts, virtual account numbers, and transaction references. We never store full bank credentials or card details.
How we use it
- To operate your account and issue API keys.
- To credit funding and reconcile your balance.
- To fulfill and track your orders.
- To respond to support requests and keep the service reliable.
- To comply with legal and regulatory obligations.
What we share
We do not sell your data. We share it only with service providers that help us operate:
- Payment processing. Funding is handled through a payment gateway, including virtual account services in Nigeria. The gateway receives your funding details to settle your transfers.
- Email delivery. We use an email provider to send account and verification messages.
- Infrastructure. Hosting and database providers store data on our behalf.
Each provider is bound by its own obligations to protect your data and may only use it to provide services to us.
How long we keep it
Account information is kept for as long as your account is active. Transaction and order records are kept for seven years to satisfy financial and regulatory requirements. Usage logs are kept for 30 days for security and debugging, then deleted.
Your rights
Depending on where you are, you may have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email [email protected]. We respond within 30 days.
Security
API keys are shown once when created and stored hashed. Traffic to the API is encrypted in transit. We review access to our systems and rotate credentials on a schedule. No system is immune to failure, so we also give you the tools to protect yourself: revoke keys from your dashboard and never commit keys to source control.
Changes to this policy
If we change this policy, we will update this page and note the date below. Material changes are announced on our changelog and through the email on your account.
Last updated: August 19, 2026.