Privacy Policy

Effective: [EFFECTIVE DATE]. Contact: [CONTACT EMAIL].

What we collect

• Account: your email address. Your API key is stored only as a one-way hash.
• Billing: handled by Stripe. We never see or store your card number; we keep your Stripe customer and subscription IDs.
• Usage: counts of API calls per product per month, to enforce your plan.
• Service data you send: for example Guardian Shield protected-person profiles and screened events, TrustLayer transactions, OceanScout storm logs.
• Audit records: every decision is logged on a tamper-evident audit chain. Prompt text sent to CA5FIVE is stored as a hash, not as text.

How we use it

Only to run the Services, enforce plans and billing, secure the platform, and meet legal obligations. We do not sell personal data and we do not use it for advertising.

Who processes it

Google Cloud (hosting and database, United States) and Stripe (payments). Each acts on our instructions under its own security and privacy terms.

Retention

Account and service data are kept while your account is open and deleted within 30 days of a deletion request, except records we must keep for tax, fraud prevention, or the integrity of the audit chain.

Your choices

Email [CONTACT EMAIL] to access, correct, export, or delete your data.

Children

Accounts are for adults 18 and over. Guardian Shield may protect minors only when set up by their parent or guardian.

Security

Data is encrypted in transit, keys are hashed, and access is logged. No system is perfectly secure; we will notify affected users of a breach as the law requires.