Privacy Policy
Last updated: January 23, 2026
This Privacy Policy describes how Black History Facts ("we," "us," or "our") collects, uses, and shares information when you use our API and related services (collectively, the "Service").
Information We Collect
Account Information
When you create an account, we collect information such as your name, email address, and authentication credentials provided through Auth0.
API Usage Data
We collect information about how you interact with our API, including API requests, endpoints accessed, request timestamps, IP addresses, and response data.
Content You Provide
When you submit facts or other content through our Service, we collect and store that information along with associated metadata.
Technical Information
We automatically collect certain technical information including browser type, device information, operating system, and referring URLs.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our API and services
- To authenticate users and manage user accounts
- To monitor and analyze usage patterns and trends
- To detect, prevent, and address technical issues and security threats
- To respond to user inquiries and provide customer support
- To enforce our terms of service and comply with legal obligations
- To send administrative messages and service updates
Information Sharing and Disclosure
Public API Data
Historical facts and related content accessed through our API are publicly available. This information may be viewed and accessed by any user of the Service.
Service Providers
We may share information with third-party service providers who perform services on our behalf, such as authentication (Auth0), hosting, analytics, and customer support.
Legal Requirements
We may disclose information if required by law or in response to valid legal processes, such as subpoenas, court orders, or government requests.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We do not sell your personal information to third parties for marketing purposes.
Data Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using HTTPS/TLS
- Secure authentication through Auth0
- Regular security assessments and updates
- Access controls and authentication requirements
- Monitoring for suspicious activity
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.
Data Retention
We retain your information for as long as your account is active or as needed to provide you services. We may retain certain information after account closure as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes such as analytics and record-keeping.
Your Rights and Choices
Access and Updates
You may access and update your account information through your profile page.
Account Deletion
You may request deletion of your account by contacting us. Please note that some information may remain in our systems for legal or legitimate business purposes.
API Access
You can control your API usage and revoke API access through your account settings.
API-Specific Privacy Practices
Rate Limiting and Monitoring
We monitor API usage to enforce rate limits and prevent abuse. This monitoring includes tracking request frequency, patterns, and anomalies.
API Keys and Authentication
API keys and authentication tokens should be kept confidential. You are responsible for maintaining the security of your API credentials.
Request Logging
We log API requests for debugging, security, and analytics purposes. Logs may include request parameters, timestamps, and response codes.
Third-Party Services
Our Service integrates with third-party services, including:
- Auth0 - for user authentication and identity management
- Cloud hosting providers - for infrastructure and data storage
These third parties have their own privacy policies. We encourage you to review their policies to understand how they handle your information.
Children's Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: