Privacy Policy
At Core402, privacy and data sovereignty for your M2M requests are engineered into our architecture (Privacy by Design). We strictly adhere to data minimization principles.
1. Data Minimization & Scope
When interacting with our extraction APIs and HTTP 402 micro-transaction endpoints, we only collect data strictly necessary to operate the service:
- API Key Token (
X-API-Key): Anonymized credentials used to decrement your prepaid credit balance. - Billing Email Address: Provided via Stripe Checkout upon order completion to deliver your API credentials and receipts.
- Technical API Logs: Ephemeral metadata (timestamps, HTTP status response codes, execution latency) stored temporarily for infrastructure monitoring and security.
2. In-Memory Stream Processing & Zero Storage
Scraped content processed during your API calls is handled strictly in volatile RAM memory and returned immediately to the requester as a structured JSON payload.
🔒 No scraped payloads, extracted HTML content, or target request URLs are ever written to persistent disk storage or database servers.
3. Sovereign EU Hosting & Subprocessors
Our entire infrastructure stack (API gateways, credit balance ledgers, Docker execution nodes) operates exclusively inside French data centers:
- Infrastructure Hosting: Société Ligne Web Services - LWS, 10 rue de Penthièvre, 75008 Paris, France.
- Payment Gateway: Stripe Inc. (PCI-DSS Level 1 compliant). No credit card data ever touches Core402 servers.
We do not sell, license, or share your data with third-party advertisers or data brokers under any circumstances.
4. GDPR Rights & Contact
Under the European General Data Protection Regulation (GDPR - Regulation EU 2016/679), you hold full rights to access, rectify, or request deletion of your account records.
To exercise your rights or request API key revocation, please email our support team directly: support@getcore402.com.