Privacy Policy — endoflife.ai

Plain language summary: We collect minimal data. We don't sell it. We don't share it with advertisers. We use Google Analytics to understand traffic and Beehiiv to send newsletters. You can unsubscribe or request deletion at any time.

Who we are

endoflife.ai is a free public platform tracking software end-of-life dates and publishing EOL Risk Scores™ for 500+ software products. The platform is operated by EndofLife AI Inc., an Alberta (Canada) corporation. Mailing address: Box 4024 Station Main, Taber, Alberta T1G 2C6, Canada.

Contact: [email protected]

What data we collect

Data you provide directly

Email address — when you subscribe to our newsletter or request an API key. Used only to send you the newsletter or API key. Never sold or shared with third parties for marketing.
Name and company — optionally provided when requesting a Pro API key. Used only to process your request.
API key requests — use case and integration details you provide. Used to evaluate and fulfill your request.
EOL alerts — when you subscribe to end-of-life alerts we store your email address and the product versions you asked to watch, after you confirm the subscription by email (double opt-in). Every alert email carries an unsubscribe link.
Website forms — the name, email, company and message you enter in our contact, partner, commercial-inquiry and feed-notification forms. Used only to respond to you.

Data collected automatically

Usage analytics — we use Google Analytics (G-1YKHQ5MGPY) to collect anonymized data about page views, session duration, country of origin, and traffic sources. Google Analytics uses cookies. You can opt out via Google's opt-out tool.
API usage — when you use the endoflife.ai API, we log your IP address and request count for rate limiting purposes. This data is stored in Cloudflare KV and automatically expires after 24 hours. We do not log request content or response data.
Session analytics — we use Microsoft Clarity (project xml7rjk3gz) for heatmaps and masked session replays that show how pages are used. Text you type is masked. For visitors in the European Union, Clarity and Google Analytics load only after you accept the consent prompt.
MCP server telemetry — when an AI agent calls our MCP server we record the tool name, whether the call succeeded and how long it took. We do not record who called or what was asked.
Server logs — standard web server logs including IP addresses, browser type, and pages visited. Retained for 30 days for security and debugging purposes.

Cookies

We use cookies only for Google Analytics and Microsoft Clarity. Visitors in the European Union see a consent prompt before either loads. We do not use advertising cookies, tracking pixels, or any third-party marketing cookies. If you prefer not to accept cookies, you can disable them in your browser settings.

How we use your data

To send newsletters you subscribed to — you can unsubscribe at any time via the link in every email
To issue and manage API keys
To enforce API rate limits
To understand how the platform is used and improve it
To respond to your inquiries

We do not use your data for advertising. We do not sell your data. We do not share your data with third parties except as described below.

Third parties we use

Beehiiv — newsletter platform. Your email address is stored on Beehiiv's servers. Beehiiv Privacy Policy
Google Analytics — anonymized usage analytics. Google Privacy Policy
Cloudflare — CDN, API hosting, and DDoS protection. Traffic passes through Cloudflare's network. Cloudflare Privacy Policy
Netlify — website hosting and the storage of website form submissions. Netlify Privacy Policy
Microsoft Clarity — heatmaps and masked session replays. Microsoft Privacy Statement
Resend — sends our transactional email (API keys and EOL alerts). Resend Privacy Policy

Your rights

GDPR (European Union)

If you are located in the European Union, you have the right to access, correct, or delete your personal data. You also have the right to object to processing, request restriction of processing, and data portability. To exercise these rights, email [email protected]. We acknowledge requests within 5 business days and complete them within 30 days.

CASL (Canada)

If you are located in Canada, you have the right to withdraw consent to receive commercial electronic messages at any time. You can unsubscribe from our newsletter via the unsubscribe link in any email, or by emailing [email protected]. We will process your request within 10 business days.

California (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email [email protected].

Data retention

Newsletter email addresses — retained until you unsubscribe or request deletion
API key data — retained while your key is active; deleted on request, or within 30 days of cancellation
EOL alert subscriptions — retained until you unsubscribe or request deletion
Website form submissions — retained until we have answered you and you ask for deletion; reviewed yearly
API rate limit data — automatically expires after 24 hours
Server logs — retained for 30 days
Analytics data — retained per Google Analytics default settings (26 months); Microsoft Clarity session replays per Microsoft's retention (30 days), heatmaps up to 13 months
MCP server telemetry — tool name and timing only, retained per Cloudflare Analytics Engine's retention (90 days)

Data security

We use industry-standard security measures including HTTPS encryption on all pages, Cloudflare's security layer, and access controls on all data stores. No method of transmission or storage is 100% secure. We will notify affected users in the event of a data breach affecting their personal information.

Children

endoflife.ai is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at [email protected].

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For material changes, we will notify newsletter subscribers by email.

Contact

For any privacy-related questions or requests:
Email: [email protected]
Address: EndofLife AI Inc., Box 4024 Station Main, Taber, Alberta T1G 2C6, Canada