Effective September 28, 2026

Privacy Policy

This policy describes the data handling for the experimental Brand Extractor service.

What the service processes

The API processes the URL you submit, the public page returned by that URL, request timestamps, request IDs, technical status, response time, candidate counts, and whether a payment header was present. Application telemetry hashes the requested hostname and user-agent rather than intentionally logging their raw values.

Payments

x402 payments are processed by the configured facilitator and public blockchain. Wallet addresses, amounts, transaction identifiers, and timestamps may be publicly visible and may be processed under the facilitator’s own privacy terms.

Storage and retention

Fetched page bodies and extracted results are processed in memory and are not intentionally stored by the application. Responses use no-store cache instructions. Operational telemetry is intended to be retained for no more than 30 days, although hosting, security, and payment providers may retain their own logs for different periods.

Why data is processed

Brand Extractor processes this information to fulfill requests, prevent abuse and private-network access, diagnose failures, measure whether the experiment is used, and investigate payment or refund issues.

Third parties and international processing

The submitted website receives a request from the service infrastructure and can observe its IP address and user-agent. Hosting, logging, facilitator, and blockchain providers may process data in other countries. The service does not sell personal information.

Your choices

Do not submit URLs containing secrets, access tokens, personal data, or non-public resources. For a privacy request, contact the operator and include any relevant request ID. Some blockchain records cannot be altered or deleted by the operator.

Contact

Privacy questions: support@ilyyya.com.