Medusa · Privacy & Data
Medusa privacy & data
Read from Medusa's own page on 2026-11-10. 15 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Role
value: controller
We act as controller for connector account and usage information.Read from Medusa's own page on 2026-11-10
Data categories
category: identifying
When you fill out a form on our website, we collect your name, email address, company name, and any other information you provide in the form.Read from Medusa's own page on 2026-11-10
category: device
This includes your IP address, browser type, pages visited, and other anonymous data collected via website analytics tools.Read from Medusa's own page on 2026-11-10
category: location
Store records may contain location information, such as billing and shipping addresses.Read from Medusa's own page on 2026-11-10
category: behavioral
We also process tool-usage and diagnostic information to measure use and investigate failures.Read from Medusa's own page on 2026-11-10
Purposes
purpose: Marketing and sales communications
If you consent, we may use your contact details to send you information about our services, offers, or industry news.Read from Medusa's own page on 2026-11-10
purpose: Website analytics
We use Google Analytics to analyze website traffic and improve our services.Read from Medusa's own page on 2026-11-10
purpose: Connector requests
We process tool inputs to execute your requests and tool results to return the requested information.Read from Medusa's own page on 2026-11-10
Retention
scope: Personal data generally
We will retain your personal data only as long as necessary to fulfill the purposes for which we collected it.Read from Medusa's own page on 2026-11-10
scope: Connector data
We retain connector data only for as long as necessary to authenticate and process requests, operate and secure the connector, investigate failures, and meet applicable legal obligations.Read from Medusa's own page on 2026-11-10
Residency
The page states nothing on this.
International transfers
The page states nothing on this.
Subprocessors
Our connector service providers include AWS and Vercel for infrastructure and PostHog for product analytics.Read from Medusa's own page on 2026-11-10
Data processing agreement
Deletion
route: Contact us to request access to or deletion of your connector account and usage information.
Contact us to request access to or deletion of your connector account and usage information.Read from Medusa's own page on 2026-11-10
Data subject rights
right: access, rectify, erase, object, portability
you have the right to access, rectify, erase, object, and receive your data in a portable fashion.Read from Medusa's own page on 2026-11-10
right: withdraw consent or object
You may withdraw consent or object to processing based on legitimate interests by contacting us.Read from Medusa's own page on 2026-11-10
Sale or sharing
stance: prohibited
We do not sell connector personal data or share it for advertising.Read from Medusa's own page on 2026-11-10
Document
Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page