Effective July 22, 2026 · PlanisphereUS, Corp.

Privacy Policy

This Privacy Policy explains how PlanisphereUS, Corp. ("Planisphere," "we") handles information in connection with the Planisphere API and related services (the "Service").

What we collect

• Account & billing data: the email and organization you provide at signup, and billing details processed by our payment provider (we do not store full card numbers).
• Usage metadata: API keys (stored hashed), request metadata, rate and usage counts, and the hashes and raw-safe metadata needed to produce evidence.
• Evidence and optional attachments: record identifiers, commitments, policy decisions, review and audit history, and metadata retained under your workspace settings. If you attach content, we store the encrypted attachment and its envelope; the content is encrypted on your device with a key you hold.

What we do not collect

The Service is content-minimizing. Record payload commitments are hashes, not the underlying content. Some interfaces process submitted content to compute those commitments without retaining that plaintext. Workspace settings can permit designated metadata values to be retained, and optional encrypted attachments are stored separately. Do not put secrets or unnecessary personal information into names, identifiers, metadata, or other descriptive fields. We do not sell your data and do not use it for advertising.

How we use it

To provide, secure, meter, and bill the Service, and to communicate with you about it.

Sharing

We share limited data with service providers who operate the Service — for example our payment processor (Stripe) and cloud host (Google Cloud) — under their own terms and solely to run the Service. We may disclose information if required by law.

Security

We use administrative and technical safeguards, including encryption in transit and at rest, hashed API keys, and authorization checks for workspace access. Optional content attachments are encrypted client-side; the Service does not receive the content key. We continue to review and narrow infrastructure permissions as part of operating the Service.

Your rights

Depending on where you live (for example, California under the CCPA, or the EU/UK under the GDPR), you may have rights to access, correct, or delete your personal data, or to object to certain processing. Contact us to exercise them.

Retention

We keep account and evidence metadata for as long as your account is active and as needed for legal, billing, and evidence-integrity purposes.

Children

The Service is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be posted here with a new effective date.

Contact

PlanisphereUS, Corp. — legal@planisphere.ooo