Privacy, Compliance & Security

Privacy

• We minimize collection of personal data and only process what is necessary to operate infrastructure and security controls.
• Access logs and diagnostics may include IP addresses, timestamps, user-agent strings, and request metadata for abuse prevention and reliability.
• Personal data is not sold. Where processors are used, they are limited to operational needs under contractual safeguards.
• Retention is limited to the period required for security, billing reconciliation where applicable, legal obligations, and service continuity.

Compliance

• Services are intended for lawful use only. Users are responsible for complying with applicable local laws and third-party terms.
• We prohibit unauthorized access, network abuse, fraud, malware distribution, and other illegal activities.
• We may suspend or restrict access when required to protect users, infrastructure integrity, or legal compliance.
• Requests related to data protection rights can be submitted through the operator’s designated privacy contact channel when available.

Security

• Transport encryption, access control, least-privilege credentials, and continuous monitoring are applied according to risk.
• Secrets and credentials are stored outside application repositories and rotated when exposure is suspected.
• Security incidents are investigated, contained, and documented; affected parties are notified where legally required.
• Vulnerability reports should include enough detail to reproduce the issue and avoid public disclosure before remediation.

Acceptable Use

Do not use systems connected to this domain to attack, scan without authorization, distribute harmful content, or evade lawful restrictions. Automated high-volume requests that degrade service may be rate-limited or blocked.