Privacy and public data

Two groups of people. The policy page is a draft.

The privacy policy is a draft for legal review. This is what that draft says. It is not a substitute for the page.

It covers two groups.

Customers who sign up and call the API. The draft says the account holds name, email, sign-in method (through Clerk), and team role. Billing is handled by Stripe. We receive the pack or plan, the amount, the country, and the last digits and brand of a card, not the full card number. Each API call logs the endpoint, parameters, time, status, credits charged and request id. A device fingerprint hash is used so the free grant cannot be claimed over and over. Customer data is not sold.

People in public posts. The API returns content a logged-out visitor can already see. We do not log in, we do not open private accounts, and we do not build profiles of those people. Cached results are kept at most 30 days, then deleted. You can ask for data about you to be deleted and blocked. See takedown. That does not delete it on the platform where it was published.

The draft says requests to access, correct, delete or export personal data go to [email protected], and are answered within 30 days. The controller named on the page is The Casey Company LLC, doing business as SocialScrape.

Full detail: Privacy policy.