privacy policy

effective October 5, 2026

perpspec (perpspec.com) is run by perpspec ("we"). This policy explains what we collect when you use the site and API, why, and what you can ask us to do with it. Questions: support@perpspec.com.

what we collect

account: Your email address, taken from Google sign-in or from a sign-in link you request. From Google we request only your email address and whether it is verified. We do not receive your Google password, contacts, or files.
api keys: A one-way hash of each key and its first characters, so we can recognise it. We cannot read your full key.
billing: Your Stripe customer and subscription IDs, plan and renewal date. Card details go directly to Stripe; we never see or store them.
alerts: Webhook URLs you register and the secret we generate to sign deliveries.
technical: Your IP address, kept in memory for up to an hour to enforce rate limits, and request logs on our host (time, path, status, IP) used to run and secure the service.
cookies: A session cookie that keeps you signed in for up to 30 days, and a short-lived cookie that protects the Google sign-in step. Your browser also remembers the last market filter you typed (stored only in your browser). We use no advertising or analytics cookies.
analytics: Cookie-free page-view statistics through Cloudflare Web Analytics (page, referrer, country, browser and device type). It does not track you across sites or build a profile of you.

how we use it

To sign you in, provide the API and alerts, process your subscription, prevent abuse, and fix problems. We do not sell personal data, use it for advertising, or share it except with the providers below.

google user data

perpspec's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google email address only to create and sign in to your perpspec account. We do not transfer it to others except as needed to provide the service (for example, to Stripe when you subscribe) or as required by law, and we do not use it for advertising or to train AI models.

providers we rely on

Fly.io: hosting; our server and database run in Frankfurt, Germany.
Stripe: payments and subscription management.
Google: sign-in, and the web font used on these pages (your browser loads it from Google's servers).
Resend: sending sign-in emails, when you choose that option.
Anthropic: writes the plain-English notes on exchange rule changes. It receives public exchange documentation only, never your account data.

how long we keep it

Account data stays until you ask us to delete your account. Sessions expire after 30 days and sign-in links after 15 minutes (unused links are cleared within a day). Server logs are kept for the period our host retains them. Stripe keeps payment records as financial regulations require.

your choices and rights

You can sign out at any time, regenerate your API key, and cancel your subscription from your account page. Email support@perpspec.com to get a copy of your data, correct it, or delete your account. Depending on where you live (for example under the GDPR in the EU or PIPEDA in Canada) you may have further rights, including complaining to your data protection authority. We will answer within 30 days.

security

Connections use HTTPS, API keys and sessions are stored hashed, and sign-in links are single-use and short-lived. No system is perfectly secure; if you think your key has leaked, generate a new one from your account page.

children

perpspec is not intended for anyone under 18, and we do not knowingly collect their data.

changes

If we change this policy we will update the date above, and tell account holders by email for significant changes.

terms · privacy