Privacy Policy & Data Retention
Last updated: January 2026 | Panacea Tech, LLC
TL;DR - The Short Version
- ✓Your Stripe stays yours. We connect via OAuth but never store your Stripe credentials, products, or customer payment info.
- ✓Export everything. Full data export available anytime. Your users, usage data, configuration - all of it.
- ✓Built on open source. Our foundation (plug-saas) is MIT-licensed. CSV export anytime. Your data stays portable.
- ✓We don't sell data. Ever. Your data is yours.
What We Store
When you use Dream API, we store the minimum data needed to provide the service:
For You (The Developer)
- Email address (via Clerk authentication)
- Project configuration (tier names, prices, limits you set)
- API keys (publishable and secret keys we generate)
- Stripe Connect account ID (to link your Stripe, not your credentials)
For Your End Users
- Clerk user ID and email
- Which plan they're on
- Usage counts (if you use metered billing)
- Subscription status from Stripe webhooks
What we DON'T store: Credit card numbers, bank accounts, Stripe API keys, product catalog details, transaction histories, or any payment information. That all lives in Stripe where it belongs.
Data Export
You can export all your data at any time from the dashboard. This includes:
- All end-user records (IDs, emails, plans, usage)
- Project configuration and tier settings
- Usage history and analytics
- Webhook event logs
Export format is CSV. Your data should be portable. If you decide to leave, you take everything with you.
Immediate Deletion
Want your data gone right now? You have full control:
Delete Project = Instant Wipe
Go to your project settings and click "Delete Project." That's it. All end-user data, usage records, configuration - everything associated with that project is permanently and immediately deleted. No waiting period. No "we'll get to it." Gone.
Export your data first if you need it - this action is irreversible.
We don't keep backups of your data "just in case." We don't sell it. We don't analyze it for trends. When you delete, it's deleted. That's how it should work.
Your Data, Your Control
I'm a developer building for developers. I know the frustration of platforms that hold your data hostage or make it hard to leave. Dream API is designed with you in control:
Open Source Foundation
Dream API is built on plug-saas, our MIT-licensed open source project. It's a single-site SaaS backend you can run yourself. Dream API adds multi-tenant architecture, D1 database, dashboard, and more - but the foundation is open.
Your Stripe, Your Products
Products, prices, and subscriptions live in YOUR Stripe account. If you leave Dream API, nothing changes for your customers. Their subscriptions continue. Your revenue continues. You just need a new way to check auth and track usage.
Why Store Isn't Separate
I intentionally didn't build the store functionality as a separate, locked-in service. It uses the same SDK, same patterns, same export capabilities. No artificial barriers between "store" and "SaaS" features. It's all just your product.
Data Retention
Here's what happens to your data in different scenarios:
| Scenario | What Happens |
|---|---|
| Active subscription | Data retained indefinitely |
| Cancel subscription | 7-day grace period (API still works), then API access stops |
| 30 days after cancellation | Data permanently deleted (export first!) |
| Request deletion | Email us, we delete within 48 hours |
Cookies & Analytics
We use minimal cookies:
- Clerk session cookies - Required for authentication
- Cloudflare cookies - Security and performance (DDoS protection)
We don't use Google Analytics, Facebook pixels, or any third-party tracking. We have internal metrics for things like "how many users signed up today" but we don't track individual behavior or sell data to advertisers.
Contact
Questions about privacy or data? Reach out:
Email: [email protected]
Panacea Tech, LLC
PO Box 4811, Eastman, GA 31023
Built on Open Source
Dream API is built on plug-saas, our MIT-licensed foundation. It's a single-site SaaS backend you can inspect, learn from, or run yourself. Dream API adds the multi-tenant architecture, dashboard, and store functionality - but the core patterns are open for everyone.
View plug-saas on GitHub