Privacy
This notice describes the personal data the service processes, why, for how long, and who else it reaches. Every row below corresponds to something the service actually stores — if you find a statement here that does not match what it does, tell us and we will correct it.
What we store about you
| What | Why | Kept |
|---|---|---|
| Email address | It is the account. Sign-in links go to it | Until you ask us to delete the account |
| Credit balance and ledger | So a purchase cannot be lost and a charge can be explained | With the account |
| Search filters you sent | The ledger records what a charge was for. For a search that is the query string, up to the first 60 characters. For a company or employment call it is the registration number | With the account |
| API keys | Hashed (SHA-256). We cannot show you a key again — that is why the plaintext appears once, at creation | Until revoked, then the row stays with a revoked timestamp |
| Daily call counts | One row per key per day: how many calls, how many credits. Not a request log — individual calls are not recorded | With the account |
| Sign-in links | Hashed token and the email it was issued for | 15 minutes, then unusable |
| Feedback you submit | What you wrote, the page you were on, and your email if you gave one | Until acted on or deleted |
| A hash of your IP, on feedback only | To stop one person filling the form all day. Salted with a server secret; the raw address is never written | One day |
What we do not store
| No request log | We count calls per key per day. We do not keep a row per request, per URL or per response |
|---|---|
| No payment details | Card numbers never reach us. Polar handles payment and tells us only that an order completed |
| No tracking | No analytics script, no advertising pixel, no third-party cookie. The only cookie is your sign-in session |
| No profile building | We do not combine your searches into a picture of you, and we do not sell or share anything about you |
Who else processes it
| Who | What reaches them |
|---|---|
| Cloudflare | Hosting, and the database this all lives in. Every request passes through them |
| Polar | Payment. Your email and what you bought. They hold the card details, we do not |
| Resend | Sign-in emails. Your email address and the link |
| Ministry of the Interior and Safety (juso.go.kr) | The address you send to /addresses is forwarded to the government address register to be resolved. Nothing about your account goes with it |
Deleting your account
Write to support@notonlystock.com from the address on the account. We delete the account, its keys, its ledger and its feedback. Unspent credits are not refunded on deletion — ask for a refund first if you want one.
Payment records that Polar must keep for tax and accounting are theirs, not ours, and deletion here does not reach them.
Where the data lives
Cloudflare D1 in their Asia-Pacific region. Sign-in emails and payments cross borders to the processors above.
Your rights
You may ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write from the address on the account to support@notonlystock.com. We answer within 14 days. There is no charge, and we do not ask why.
Where processing rests on your consent — a sign-in email, a feedback submission — you can withdraw it by deleting the account or asking us to remove the submission.
Legal basis and retention
| Running the service | Account, credits and keys are processed to perform the contract you entered when you created an account. Kept for as long as the account exists |
|---|---|
| Records of payment | Kept as long as tax and accounting law requires, which is longer than the account. These are the transaction records, not your searches |
| Preventing abuse | Hashed IP on feedback only, kept one day, on the basis of our legitimate interest in the form not being flooded |
Changes to this notice
If this notice changes in a way that affects what we do with your data, we will post it here and say so on the front page 14 days before it takes effect. Corrections that only make existing wording clearer take effect when posted.
Contact
Questions about this notice, or a request about your data: support@notonlystock.com. For a data-processing agreement, say what you need and we will send one.
Effective 25 August 2026.