Privacy Policy

Effective Date: 1/17/2026

1. Information We Do NOT Collect or Log

WE DO NOT LOG ANY QUERIES EVER. The KERI Knowledge Base API processes search queries and concept requests to provide information about the KERI protocol and GLEIF ecosystem, but:

• No Query Logging: Search terms and concept names are processed in memory only and never logged or stored
• No User Tracking: We do not track individual users or create usage profiles
• No Personal Data: We do not collect, store, or process any personal information
• Stateless Processing: Each request is processed independently without retaining any data

2. How We Process Requests

Your requests are processed solely to:

• Provide KERI protocol documentation and explanations
• Return relevant search results from our knowledge base
• Generate concept explanations and related information
• All processing happens in real-time with no data retention

3. Data Storage and Retention

• Zero Query Logging: We do not log, store, or retain any search queries or user inputs
• No Content Logging: We do not log the content of API requests or the data you search for
• Limited Data Collection: To provide API authentication and enforce rate limits, we store:
  • Email addresses: Associated with API keys for authentication purposes
  • Request counts: The number of API requests made per user to enforce rate limiting and prevent abuse
• No User Profiles: We do not create or maintain detailed user profiles or track your browsing behavior
• Query Processing: While we count requests for rate limiting, we do not store the content or nature of those requests

4. Data Sharing

We do not share, sell, or transfer your data to third parties. The service operates as a read-only knowledge base.

5. Security

We implement appropriate security measures including:

• HTTPS encryption for all API communications
• Optional API token authentication
• Regular security updates and monitoring

6. Third-Party Infrastructure

This service is hosted on third-party infrastructure providers. While we do not log any queries or user data, these providers may have their own logging policies that are beyond our control:

• Vercel: Hosting and serverless platform - may have standard web server access logs (subject to Vercel's privacy policy)
• Neon Database: Database hosting for our knowledge base content only - does not store user queries (subject to Neon's privacy policy)
• Anthropic Claude: AI processing used only for building our knowledge base content - user queries are NOT sent to Anthropic

Important: We have no control over what these third-party providers may log at their infrastructure level. Please review their respective privacy policies for their data practices.

7. Your Rights and Data Protection

We collect and store minimal data (email addresses and request counts) for API authentication and rate limiting purposes. You have the following rights regarding your data:

• Access: You can request information about what data we have stored (your email address and request count)
• Deletion: You can request deletion of your API key, email address, and associated request counts
• Correction: You can request correction of your email address if it is inaccurate

Query Data Protection: While we count API requests for rate limiting, we do not store the content of your queries or search terms, so there is no query data to access, modify, or delete.

To exercise these rights, please contact us using the information in section 10.

8. International Users

This service is hosted in the United States. By using the service, you consent to data processing in the US.

9. Changes to This Policy

We may update this privacy policy occasionally. Changes will be reflected in the "Effective Date" above.