Privacy Policy

Account data: name, email address, company name, and billing information provided during registration.

Usage data: API request logs, IP addresses, browser/device metadata, and feature interaction telemetry.

Payment data: processed via our payment processor (Stripe); we do not store raw card numbers.

To provision and maintain your blackhawnketnork account, API keys, and gift card issuance services.

To send transactional emails (invoices, security alerts, API usage warnings) and, with consent, product updates.

To detect abuse, prevent fraud, and ensure platform security and regulatory compliance.

We use strictly necessary cookies for authentication sessions and CSRF protection.

With your consent, we use analytics cookies (e.g., Plausible Analytics) to understand aggregate usage patterns.

You may manage or withdraw cookie consent at any time via our Cookie Preference Centre.

We share data only with vetted sub-processors (Stripe for payments, AWS for infrastructure, Postmark for email) under binding data processing agreements.

We never sell your personal data to advertisers or data brokers.

We may disclose data if required by law, court order, or to protect the rights and safety of blackhawnketnork or its users.

EU/UK residents: you have the right to access, rectify, erase, restrict, or port your data, and to object to processing based on legitimate interests.

California residents: you have the right to know, delete, and opt-out of the sale of personal information (we do not sell data).

To exercise any right, email [email protected] — we respond within 30 days.

Account data is retained for the duration of your subscription plus 90 days after termination.

API request logs are retained for 12 months for security and debugging, then purged.

Billing records are retained for 7 years to satisfy financial and tax obligations.

All data in transit is encrypted via TLS 1.2+; data at rest is encrypted with AES-256.

API keys are hashed and never stored in plaintext. Access to production systems is restricted by role-based controls and MFA.

We conduct annual third-party penetration tests and operate a responsible disclosure programme.

blackhawnketnork is a B2B developer platform intended for users aged 18 and older.

We do not knowingly collect personal data from minors. If we discover such data, we will delete it promptly.

We may update this policy periodically. Material changes will be notified by email at least 14 days before taking effect.

Continued use of the platform after the effective date constitutes acceptance of the revised policy.

Data Controller: blackhawnketnork Inc., 340 Pine Street, Suite 800, San Francisco, CA 94104, United States.

Privacy enquiries: [email protected]

EU Representative (Art. 27 GDPR): available upon request at the email above.