pxy / privacy

Privacy notice

Updated November 8, 2026

Smartshare, Inc. operates pxy, an account-authorization and API proxy service for independent customer applications.

Information processed

pxy stores provider account identifiers, account metadata supplied by the provider, external-user and project references, requested and granted access, encrypted authorization credentials, connection lifecycle state and request accounting metadata. Provider passwords remain with the provider.

Requests and responses pass through the broker to the customer application you authorize. The core proxy does not retain API request or response bodies. The customer application may process or retain the information it receives under its own disclosures.

Purpose and recipients

We process this information to provide the requested connection, refresh authorization, forward permitted requests, operate the service and respond to security or support issues. We do not sell provider data, use it for advertising or use it to train general-purpose models. Transfers to customer applications must serve the disclosed, authorized user-facing purpose.

AWS hosts the broker, database and key-management services. Vercel hosts this website and may process website request metadata. Provider services handle their own sign-in and APIs. Customer applications must identify any additional recipients or processors in their disclosures.

Google API information is subject to the Google API Services User Data Policy, including its Limited Use requirements. Required provider approval and assessment must precede the applicable managed production access.

Retention, access and deletion

Authorization credentials remain while the connection is active, subject to expiry and revocation. Disconnect removes the connection’s active credentials and stops new proxy requests; encrypted snapshots can remain for up to 24 hours solely to complete provider revocation. Already admitted requests may finish. Limited account, lifecycle and accounting metadata can remain for operating and securing the service. Backup retention and any customer-specific agreement also apply.

Ask the application that requested the connection to delete external-user data, and contact us for questions about pxy’s records. Removing a connection does not automatically delete information already retained by that application or the upstream provider. Authorized operational access is limited to service, security and support purposes.

Contact billing@beam.cloud about access, correction, deletion or this notice. Do not send credentials or API tokens.