Legal Documents

This page provides important legal agreements, policies, and security guidelines governing the use of Sturdy Statistics. Here, you’ll find our Terms of Service, Privacy Policy, and Service Level Agreement, as well as security policies related to API key management and vendor disclosures. These documents outline your rights, responsibilities, and the measures we take to protect your data and ensure service reliability. Please review them carefully before using our services.

Summary of Key Sturdy Statistics Policies: We realize that reading legal policies can be time-consuming, so we’ve provided a concise summary of our key policies. This high-level overview explains the essential terms, privacy protections, and security requirements in a clear and accessible format. While this summary is not a substitute for the full legal agreements, it offers a practical guide to your rights, responsibilities, and how we safeguard your data.

Terms of Service and Use

These Terms govern your use of Sturdy Statistics, including our API, website, and related services. They outline your rights and responsibilities, acceptable use policies, API security requirements, and data ownership rules. The Terms also cover subscription billing, service availability, termination conditions, and dispute resolution. By using our services, you agree to these Terms. Review them to understand your obligations and protections.

Privacy Policy

Our Privacy Policy outlines how we collect, use, and protect your information. We do not sell or share customer data, and all stored data is encrypted in transit and at rest. We only collect essential information for providing our services and enforcing security measures. Additionally, we offer an optional enhancement using OpenAI, which can be disabled at any time. Learn more about your rights and data control options.

Service Level Agreement

Our Service Level Agreement (SLA) defines the performance standards, uptime guarantees, and support commitments we provide.

API Key Management Policy

API keys are confidential credentials that grant access to Sturdy Statistics services. This policy outlines best practices for securing API keys, including regular rotation, monitoring usage, and enforcing the principle of least privilege. It also explains customer responsibilities for preventing unauthorized access and the consequences of mismanagement. Learn how to securely store, rotate, and protect your API keys.

Vendor and Subprocessor Disclosure

Transparency and security are at the core of our operations. This document lists the third-party vendors and subprocessors we use, including AWS for encrypted storage and Cloudflare for network security. It also details our optional OpenAI-powered feature, which customers can disable at any time. All subprocessors meet industry compliance standards such as SOC 2, ISO 27001, and CCPA/GDPR. Learn how we protect your data and ensure system reliability.

Documentation: API Key Rotation and Management

This guide provides a detailed overview of how to securely generate, store, rotate, and revoke API keys. It explains key lifecycle management, best practices for access control, and how to use the Sturdy Statistics web portal and API for key administration. Learn how to prevent unauthorized access and ensure smooth key transitions while maintaining security and uptime.