Last updated: April 6, 2026
Welcome to DocoAPI. We built this service for developers and we believe in being straight with you about how your data is handled. This Privacy Policy explains what we collect, why we collect it, and what your rights are. No legalese — just plain English.
If you have questions, email us at [email protected].
DocoAPI is operated by SAGA LABS LTDA (trading as SagaLabs). Our service is available at docoapi.com.
For the purposes of GDPR and similar data protection laws, SAGA LABS LTDA is the data controller for your personal information.
When you sign up, we collect:
When you use DocoAPI, you upload or sync OpenAPI/Swagger specification files. These are your specs — they belong to you. We store them to power your documentation portal.
If you choose to connect your GitHub account, we request access to the repositories you authorize. We use this solely to sync your OpenAPI specs into DocoAPI. We do not read, store, or analyze unrelated repository content.
We collect data about how you use DocoAPI, including:
This helps us understand how the product is used and where to improve it.
Payments and subscriptions are handled by Paddle, our Merchant of Record. We do not store your credit card details. Paddle processes all payment information directly and provides us with subscription status (active, trialing, cancelled) and anonymized billing metadata.
We use:
We do not use advertising or third-party tracking cookies.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide the DocoAPI service | Account info, API specs, GitHub access | Contract performance |
| Process billing and subscriptions | Email, subscription status via Paddle | Contract performance |
| Generate AI-powered search embeddings | API spec content | Legitimate interest / Contract |
| Improve the product | Usage data | Legitimate interest |
| Send service emails (receipts, alerts) | Contract performance | |
| Respond to support requests | Email, account info | Legitimate interest |
We do not sell your data. We do not use your data for advertising.
We use a small number of trusted third parties to operate DocoAPI. Each has their own privacy policy:
Paddle is our Merchant of Record and handles all payments, subscriptions, and VAT compliance globally. When you subscribe, your payment information is handled directly by Paddle under their privacy policy.
If you connect your GitHub account, GitHub processes the OAuth authorization. We only access repositories and data you explicitly grant access to.
We use OpenAI's embedding API to generate vector embeddings of your API specification content. These embeddings power the semantic search feature in your docs portal. Your spec content is sent to OpenAI's API for this purpose. OpenAI does not use API data to train their models by default.
DocoAPI runs on cloud infrastructure (Railway for the backend, Vercel for the frontend). These providers process data as part of hosting our service and operate under standard data processor agreements.
If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it.
If you are located in the EU, EEA, UK, or other regions with data protection laws, you have the following rights:
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.
We take reasonable technical and organizational measures to protect your data:
No system is 100% secure. If we ever become aware of a data breach that affects you, we will notify you promptly.
DocoAPI is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. For significant changes, we'll notify you via email or an in-app notice.
Continued use of DocoAPI after changes take effect means you accept the updated policy.