NetNest Design Fundamentals API: Privacy Policy
Last updated 2026-10-26

NetNest Design LLC ("we") operates the NetNest Design Fundamentals API. This policy explains what we collect and why.

What we collect
* Account data: your email address, your plan, and when you created the account.
* API keys: we store only a one way hash of each key, never the key itself.
* Linked apps: when you connect an app such as ChatGPT to your account, which app it is, when you connected it, and a one way hash of each access and refresh token we issue to it. The app never receives your email address, your API keys or your billing details.
* Usage: the number of calls per day and per billing period, and the time of your first and most recent call.
* Request data: your IP address and device information (user agent) are logged with each request, used for rate limiting, abuse prevention and security, and kept in hosting logs for a limited period.
* Billing: our payment processor collects your payment details. We receive a customer reference, plan and invoice status, never your full card number.
* x402 payments: the paying wallet address and transaction, which are public on the blockchain.

What we do not do
* We do not sell your personal information.
* We do not share it for advertising or third party marketing.
* We do not use tracking cookies or advertising trackers. The only cookie is set by the sign in page you see when you connect an app: it protects that sign in against forgery and expires within 10 minutes.

How we use it
To run the Service, enforce limits, bill paid plans, prevent abuse, and send transactional email about your account (a welcome message with your quickstart, notices when you approach or reach your limit, a reminder if you have not used a new key, and a sign in code when you ask for one to connect an app). We do not send marketing email.

Who processes it for us
* Vercel (hosting and request logs)
* Neon (database)
* Upstash (rate limit and usage counters)
* Resend (transactional email)
* Stripe (payments and invoices)
* Coinbase Developer Platform (x402 payment verification and settlement)
These providers process data only to provide their service to us.

Retention
Account data is kept while your account exists. Usage counts are kept for billing and support. When you delete your account, your account record, keys and usage records are deleted at once. Tokens issued to linked apps expire within an hour (refresh tokens within 90 days) and are deleted within 30 days of expiring or being revoked. Recovering your key disconnects every linked app, except on an account that had no key of its own, where every linked app was connected by a code sent to your email. Deleting your account removes linked apps at once.

Your rights
Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other US states with privacy laws, and people elsewhere with similar rights, may ask to know, access, correct or delete their personal information, ask for a portable copy, and opt out of sale or targeted advertising (we do neither). You can delete your account yourself at any time with DELETE /v1/account. For any other request, email registrations@netnestdesign.com. We respond within 45 days and do not discriminate against anyone for using these rights. If we decline a request you may appeal by replying to our decision; we answer appeals within 45 days.

Children
The Service is not directed to children under 13 and we do not knowingly collect their information.

Contact
registrations@netnestdesign.com
NetNest Design LLC