Privacy Policy

1. Introduction

PreReason ("we", "our", "us") operates the PreReason API service at prereason.com. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

2. Information We Collect

2.1 Account Information

• Email address (for registered users)
• Username (optional)
• Authentication credentials (securely hashed)

2.2 Usage Data

• API requests made (endpoint, timestamp, response time)
• Rate limit consumption
• Error occurrences

2.3 Technical Data

• IP address
• User agent/browser information
• Request headers

2.4 Payment Information

Payment processing is handled by Stripe. We do not store credit card details. See Stripe's Privacy Policy.

2.5 x402 Payment Data

If you use x402 micropayments, we may collect your cryptocurrency wallet address and transaction identifiers for the purpose of processing payments and providing customer support. We do not store private keys or have access to your wallet funds.

3. How We Use Your Information

• Service Operation: Rate limiting, abuse prevention, API access control
• Analytics: Improving service quality and performance
• Communication: Service updates, security alerts, support responses
• Legal Compliance: Meeting regulatory requirements

4. Third-Party Services

We use the following third-party services:

5. Data Retention

• Account data: Retained until account deletion request
• API logs: 90 days rolling retention
• Analytics data: 12 months

6. Your Rights (GDPR)

If you are located in the European Union, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Data Portability: Export your data
• Right to Object: Object to certain processing activities

To exercise these rights, contact us at: privacy@prereason.com

7. Your Rights (CCPA - California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. You have the right to request disclosure of the categories and specific pieces of personal information we have collected, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information.

We do not sell personal information.

To exercise your CCPA rights, contact us at privacy@prereason.com. We will respond within 45 days as required by law.

8. International Users

Our Service is operated from the United States. If you access the Service from outside the United States, you understand and consent to the transfer of your information to the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer and represent that you have the legal authority to bind yourself to this Privacy Policy.

9. Children's Privacy

We do not knowingly collect personal information from children under 13 years of age. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

10. Cookies

We use essential cookies for:

• Session management
• Authentication state
• Theme preferences

We do not use analytics or advertising cookies.

11. Security

We implement industry-standard security measures including:

• HTTPS encryption for all communications
• SHA-256 hashed API keys
• Rate limiting and abuse prevention
• Regular security audits (OWASP compliance)

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or prominent notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Requests from Governments and Others

We disclose personal data only when a request comes with valid legal process, such as a subpoena or court order, that we are legally required to follow. We check each request for legal validity, push back on requests that are overbroad or unclear, and disclose only the minimum data the request requires. We notify the affected user before disclosure unless the law forbids it. We do not give any government or third party voluntary or bulk access.

14. Contact

For privacy-related questions or requests, contact us at: privacy@prereason.com