Privacy

What we store

If you create an account we store your email address, your name if you give one, and a hash of your password. If you subscribe we store a Stripe customer reference and your plan state. API keys are stored only as a SHA-256 hash, so a key can be replaced but never recovered, not by you and not by us.

Payment intents you send

When you score a payment against your stored ledger, we record the intent, the decision and the signals that produced it. That record is the point of the product: it is the history the next check scores against, and the evidence a disputed payment is argued from. It contains what you chose to send: an agent identifier, a merchant identifier, an amount, a rail and whatever rail-specific fields you supplied.

We never ask for and have no field for a payment credential, a card number, a private key or a signed authorization payload. Do not send them.

Stateless checks

A check that carries its own context reads nothing stored and, by default, writes nothing. The intent is scored in memory and the response is returned. Unauthenticated stateless checks are rate limited by IP address, which is held only for the duration of the rate-limit window.

Cross-account signals

Paid-plan graph scoring computes aggregates across all accounts: how many distinct agents paid a merchant, what fraction of those payments were denied, whether a confirmed claim exists. These are counts and rates about merchant identifiers. No account ever sees another account’s payments, agent identifiers, amounts or decisions, and the aggregates returned are deliberately coarse enough that they cannot be worked backwards into one.

Processors

Payments are handled by Stripe, which stores your card details; we never see them. The database is hosted on Neon. Hosting is on Vercel.

Your rights

You can request a copy of your data or its deletion at any time by emailing contact us. Deleting your account removes your API keys, your spend policy, your transaction log and any claims raised against it. Note that deleting your log also deletes the evidence any open dispute would rely on.