Privacy Policy

Last updated: 12 August 2026

This policy is a working draft provided for transparency and should be reviewed by qualified legal counsel before relying on it for large-scale commercial use.

1. Who we are

AsherCore ("we", "us") provides a market-data API. This policy explains what personal data we collect when you use our website and API, how we use it, and your rights. Questions? hello@ashercore.com.

2. Data we collect

Account data. Your email address and authentication credentials (passwords are hashed by our authentication provider; we never see them in plaintext).
API usage data. API-key identifiers, request counts, endpoints called, timestamps and coarse metadata used for rate-limiting, quota accounting and abuse prevention.
Billing data. If you subscribe to a paid plan, our payment processor (Stripe) collects and processes your payment details. We receive subscription status and limited billing metadata — never your full card number.
Technical data. IP address, browser/user-agent and similar data collected automatically to operate and secure the Service.

3. How we use it

To provide, maintain, meter and secure the API and your account.
To enforce rate limits, quotas and our terms, and to detect and prevent abuse.
To process subscriptions and send service-related communications.
To improve reliability, performance and coverage of the Service.

4. What we do not do

We do not sell your personal data. The market data you request is not personal data about you, and the queries you make are used only to operate and secure the Service — not sold to third parties.

5. Sharing

We share personal data only with service providers who help us run the Service — such as our cloud/hosting provider, authentication provider (Supabase) and payment processor (Stripe) — under contracts that limit their use of it, and where required by law.

6. Cookies & local storage

Our website uses essential cookies and browser local storage to keep you signed in and remember preferences such as your theme. We do not use advertising trackers.

7. Data retention

We retain account and usage data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes and enforce agreements. You may request deletion of your account at any time.

8. Security

We use industry-standard measures to protect your data, including encryption in transit and hashed credentials. No method of transmission or storage is perfectly secure; keep your API keys confidential and rotate them if you suspect exposure.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact hello@ashercore.com.

10. International transfers

We may process and store data in countries other than yours. Where we transfer personal data across borders, we take steps to ensure appropriate safeguards are in place.

11. Children

The Service is not directed to children and is intended for users who are at least the age of majority in their jurisdiction.

12. Changes to this policy

We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by additional notice.

13. Contact

Questions about privacy? Contact us at hello@ashercore.com.