Privacy policy
Draft, effective on publication. Prepared for review by Electric Car Home Ltd against the ICO's guidance and not yet checked by a solicitor. This policy covers the data API and MCP server only; the main Cleantech Content privacy policy covers the rest of the business. Retention periods follow that policy.
1. Who is responsible
Electric Car Home Ltd (company number 12046339, registered in England and Wales, registered office Garswood, Warnford, Southampton, Hampshire, SO32 3LH), trading as Cleantech Content, is the data controller. Contact: privacy@cleantechcontent.co.uk.
2. What we collect and why
| Data | Why | Kept |
|---|---|---|
| A one-way hash of your IP address combined with a salt that changes daily. We do not store the address itself. | Free-tier limits and abuse prevention (legitimate interests) | Usage logs are kept for 24 months; hashes cannot be reversed to an address |
| Request details: endpoint, filters (hashed), user agent, referrer, response time, status, and which payment rail was used | Running, securing and improving the Service; measuring usage during our 90-day trial (legitimate interests) | 24 months |
| API keys (stored as a hash), an optional label and optional email you give us | Providing the key and credit you asked for (contract) | While the key exists and for 24 months after its last use |
| Payment references: a Stripe payment or session id, or a hash of the wallet address that paid by x402, and the amount | Delivering what you paid for, accounting and fraud prevention (contract and legal obligation) | At least six years from the end of the financial year, as accounting records |
We do not receive card numbers; Stripe handles card payments under its own privacy policy. On-chain payments are public on the Base blockchain by their nature.
3. Sharing
Processors we use: Cloudflare (hosting, in its global network), Supabase (database, hosted in London), Stripe (card payments), Coinbase Developer Platform (x402 payment verification). We do not sell personal data.
4. International transfers
Cloudflare, Stripe and Coinbase may process data outside the UK. Where they do, transfers rely on the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses in those providers' terms.
5. Your rights
You can ask for access to, correction or deletion of personal data we hold about you, or object to processing, by emailing privacy@cleantechcontent.co.uk. You can complain to the Information Commissioner's Office (ico.org.uk).
6. Cookies
The documentation site sets no cookies and uses no analytics scripts.
7. Changes
We will post changes on this page with the date they take effect.