Privacy

For paid API calls we log the timestamp, route, method and outcome, and for settled payments the network, amount, transaction hash and payer wallet address (already public on-chain). We do not store user agents or headers, and we store request content only for premium jobs and feedback, as described below. For premium report and watch jobs we also store the question or target URL you submit, the tier, the job's results and copies of the public web pages they cite, so the paying caller can retrieve them; these are deleted 30 days after the job is delivered, fails or, for a watch, ends. If a payment needs to be reconciled, we keep the payment record (route, tier, payer wallet, amount, transaction details and outcome) until it is resolved and for at most 12 months. Records are kept for 30 days (aggregate per-route counts without payer data for 90 days), used only for our own usage analytics, and never sold or shared.

Feedback (/api/feedback and the submit_feedback tool; no payment required): we store the text you send, its type and any optional fields you choose (symbol, route), plus a keyed hash (HMAC) of your IP address used for rate limits and repeat review; the IP address itself is not stored. Entries are kept for up to 90 days for human review, then deleted. Do not include personal data, secrets or keys. We may use what you send to improve Horizon Pulse, with no obligation or payment.