Privacy
Policy

What we collect

• Account data. If you buy credits or an enterprise license, we store the email address you provide and a generated API key. We do not store payment card details — payments are processed by Stripe.
• Documents you submit. When you run an extraction, the document you provide (PDF, image, CSV) is processed to produce structured data. Source documents are stored content-addressed (IPFS) only where the extraction is attested for public provenance.
• Usage metadata. Endpoint, commodity, and timing of API calls, used for metering and reliability. We do not sell this data.

Model disclosure and data processing

Extraction and enrichment may be processed by third-party model providers. As of this writing: Gemini 2.5 Flash (Google) for extraction; DeepSeek and GLM for the enrichment/sanitization pass; Groq for question-answering synthesis.

We are migrating compliance-sensitive enrichment off Chinese-hosted providers to US-hosted or self-hosted inference. Client documents are never used to train any model, ours or a provider's. Each call sends only the data needed to complete that call.

Public provenance records

Attestation records and content-addressed source references are public by design — that is how independent verification works. If you attest a document, its provenance metadata (schema UID, timestamp, content identifier) is visible in the public registry. Sensitive fields such as site coordinates are rounded to ±0.1° and personal identifiers (email, phone) are redacted before storage and delivery.

Retention

Account and API-key data is retained while your account is active. Paid responses are cached for 30 days for re-fetch, then the API copies expire; the underlying attestation and content-addressed record are permanent by design. Cached copies can be deleted on request; a permanent attestation cannot be unwritten. Receipts are accessible by their identifier — treat receipt IDs as sensitive and do not share them publicly.

Your choices

Email hello@assaychain.com to request access, correction, or deletion of your account data, or to ask questions. If AssayChain ever shuts down, every customer receives a full bulk export of their data.