Privacy Policy

CortexAssay is an API for machines. We collect the minimum needed to operate a paid API:

• What we store. Per request: endpoint, parameters, timestamp, latency, price, payment status, and a payer identifier (an x402 wallet address, or an internal credit-key id). API keys are stored only as SHA-256 hashes of a random secret. That's it — no cookies, no analytics scripts, no tracking pixels, no advertising identifiers.
• Payments. Card payments are processed entirely by Stripe; we never see or store card numbers — only the Stripe checkout session id and the resulting credit balance. x402 payments settle on the Base blockchain, which is public by design.
• Your query content. Request parameters (e.g. a search term or ticker) are stored in our operational ledger to serve, debug, and refund requests. They are never sold, shared, or used for advertising. Paid analytical requests may be processed by an LLM provider (currently OpenAI) under their API terms, which exclude training on API data.
• Retention. Operational ledgers are kept for accounting and abuse prevention. Email [email protected] to ask what we hold for your key or wallet, or to request deletion of anything not required for financial records.
• No accounts, no personal profiles. We don't collect names, emails, or personal data unless you email us; buying credits requires no account beyond the Stripe checkout.

Operator contact: [email protected]. Changes to this policy appear at this URL.