Privacy Policy

Account information. When you sign up, we collect your email address and a hashed version of your password. We never store your password in plain text.

API usage data. We track the number of API calls made with your key, credits consumed, and timestamps of requests. This data is used to calculate your monthly bill and display usage in your dashboard.

Request content. HTML or URL payloads you send to the API are processed to generate PDFs and are not stored after the response is returned. We do not retain the content of your documents.

Payment information. Billing is handled by Stripe. We do not store your credit card number or payment details — Stripe processes and vaults all payment data under their own PCI-compliant infrastructure. We receive only a Stripe customer ID and payment status.

Server logs. Standard web server logs may include your IP address, HTTP method, endpoint path, response status, and timestamp. Logs are retained for up to 30 days for debugging and security purposes.

• Authenticate your API requests via your API key
• Track and display your usage on the dashboard
• Calculate and collect your monthly bill via Stripe
• Send transactional emails (e.g., payment receipts, account notices)
• Diagnose errors, investigate abuse, and maintain service security

We do not sell your data. We do not use your data for advertising. We do not share it with third parties except as described in Section 4.

Your API key is a secret credential. It is shown once at account creation and is not recoverable — only a hashed representation is stored on our servers. Anyone with your API key can make requests billed to your account. Keep it secret and store it in an environment variable or secrets manager, not in source code.

If your key is compromised, contact us immediately at support@bolgianollc.com so we can revoke it.

We use a small set of third-party services to operate MochiPDF:

• Stripe — payment processing and billing. Stripe's privacy policy applies to data they hold: stripe.com/privacy.
• Cloudflare — CDN, DNS, and edge infrastructure. Cloudflare may process request metadata as part of routing traffic.

We do not use analytics platforms, advertising networks, or session recording tools.

We retain your account and usage data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records, which may be retained for up to 7 years).

Aggregate, anonymized usage statistics (total requests, error rates) may be retained indefinitely and cannot be linked back to you.

All data is transmitted over HTTPS. Passwords are hashed using a modern, salted algorithm before storage. API keys are stored as hashed values. We use industry-standard practices to protect data at rest and in transit.

No system is perfectly secure. If you discover a vulnerability, please disclose it responsibly to support@bolgianollc.com.

You may request access to, correction of, or deletion of your personal data at any time by emailing support@bolgianollc.com. We will respond within 30 days.

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under GDPR/UK GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

MochiPDF does not use tracking cookies or third-party analytics cookies. We use localStorage in the browser to store your API key and account ID locally on your device so you stay signed in. This data never leaves your device except as the X-API-Key header on API requests.

MochiPDF is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email. Continued use of MochiPDF after changes take effect constitutes acceptance of the revised policy.

Questions or concerns about this policy? Reach us at:

Bolgiano LLC
support@bolgianollc.com