1. What We Collect
We collect two categories of data, and only two:
- Email address — submitted when you request an API key or subscribe to a paid tier. Used for account identification and transactional email only.
- API usage logs — we record the API key ID, endpoint path, request timestamp, response status, and latency of each call. We do not log request bodies or query parameters that could contain personal data.
We do not use cookies for tracking. The marketing site uses only essential, first-party cookies set by our hosting provider.
2. How We Use It
- Provision and authenticate your API key.
- Enforce rate limits and monthly call quotas for your tier.
- Send transactional email: key issuance, quota warnings, billing receipts, and security incidents.
- Diagnose outages and performance regressions in aggregate (never correlated with individual users for marketing).
We do not sell your email address or your usage data to anyone, ever. We do not use your usage patterns to train machine learning models.
3. Third Parties
We rely on the following sub-processors. Each receives only the data needed to do its job:
- Stripe — payment processing for Starter, Pro, and Team tiers. Stripe receives your email, billing address, and card details directly; we never see the card details.
- Vercel — hosting for this marketing site and edge functions. Receives standard HTTP request metadata (IP, user-agent) for as long as required for fraud detection.
- Cloudflare — DDoS protection and CDN for the API. Receives standard HTTP request metadata and caches responses at the edge.
4. Your Rights
You can exercise the following rights at any time by emailing privacy@blockchainacademics.com:
- Access — request a copy of the data we hold about you.
- Correction — fix an inaccurate email on your account.
- Deletion — delete your account and all associated usage logs. Billing records retained only as required by tax law.
- Portability — export your usage logs as CSV.
We respond to all requests within 30 days, typically within 2 business days.
5. Contact
Privacy questions, GDPR/CCPA requests, and data incidents: privacy@blockchainacademics.com.