Last updated: 2026-07-10
This Privacy Policy explains what data the MISO LMP API (the "Service"), operated by Yitian Li, collects and how it's used. The Service's core data product, MISO grid pricing data, is public market information and is not personal data. This policy covers data about you, our customer.
| Data | When | Why |
|---|---|---|
| Email address | Signup (/api/v1/signup) or manual key issuance | Key ownership, billing tier upgrades, support contact |
| IP address | Signup requests only | Abuse prevention (limits signups per IP per day); not logged on regular data-fetching requests |
| API usage metadata | Every authenticated request | Enforcing your daily quota; we log request counts and timestamps per key, not full request/response payloads |
| Billing data | Stripe Checkout, for paid tiers | Processing your subscription. Card details are entered directly into Stripe and never reach our servers; we store only your Stripe customer and subscription IDs |
We do not use passwords (access is by API key only) and we do not collect payment card numbers.
API keys are stored as a one-way SHA-256 hash; we cannot recover your plaintext key and cannot see it after issuance. Data is held in a PostgreSQL database with row-level security enabled, accessible only via our service-level credentials. All traffic to the Service is encrypted in transit (HTTPS).
We use the following subprocessors to operate the Service:
Each processes data only as necessary to provide their respective service to us, under their own privacy policies. We do not sell your data or share it with third parties for advertising.
Our documentation page (/docs.html) loads a script from the
jsDelivr CDN (cdn.jsdelivr.net) to render API documentation; this
may log your request to jsDelivr per their own policies. No account data is
sent to this CDN.
We retain account and API key records for as long as your account is active. Usage-metadata and signup-abuse-prevention records are retained for 12 months before deletion. You may request earlier deletion at any time (see Section 6).
The Service is not directed to, and we do not knowingly collect data from, individuals under 16 years of age.
You may request access to, correction of, or deletion of your account data by emailing globalspots22@gmail.com. Deleting your account deactivates your API key and stops further billing.
Our subprocessors may process data in the United States or other countries where they operate infrastructure. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
Questions about this policy or your data: globalspots22@gmail.com