No personally identifiable information (PII) is gathered via the API. Queries that create users, only create anonymised user records, and tokens must be passed to identify data on the Promana system.
API consumers must therefore create and maintain their own user records and retain the provided user tokens on their side.