Privacy Policy

This is an early-access summary of how we handle data. A full policy will be published before public launch.

What we collect

Account details (email), API usage and request metadata, and sourcing-order history. We don't store payment card data; when payments are enabled they'll be handled by a third-party processor.

How we use it

To operate your account and API access, meter usage against your plan, facilitate sourcing, prevent abuse/fraud, and improve the product. We do not sell your data.

API keys

Keys are stored only as a salted hash plus a non-secret prefix; the full secret is shown once at creation and is never recoverable. Revoke a key any time in the terminal.

Cookies

Essential cookies for authentication, plus a small set of analytics cookies to understand usage.

Data requests

Request a copy or deletion of your data any time at privacy@openstoneos.com.

Security

Passwords and API keys are hashed; sensitive operations run server-side. We follow standard practices to protect your information.