Who is responsible
The controller is [operator's legal name and address: to be confirmed]. Contact for privacy questions: [contact address: to be confirmed].
What we keep
- Wallets: the label you give it, its address, a hash of its key, its spending rules and when it was created.
- Purchases: which service was bought, the price, the result or the reason it was blocked, a short summary of the request, a link to the result, the name your agent's app reports (for example "claude-ai"), the time, and the payment's transaction id.
- Top-ups: the amount and the transaction id.
- Result files that providers return (for example generated images), so the result link works.
- Provider listings: information about businesses copied from their public pages. Where such a page names a person, the listing may too.
The website sets no cookies of its own and runs no analytics or advertising scripts. Some preview pages keep their state in your browser's local storage, which never leaves your browser.
Your IP address is used briefly in memory to limit request rates. Our hosting provider keeps request logs (including IP addresses) for a short period for security and fault finding.
What is public by design
Wallet addresses, amounts and transactions on Base are public and permanent on that network. Sourcy cannot change or delete them.
Why we use it
To run the service you asked for: wallets, purchases, receipts and results. To keep it secure and stop abuse. To show a catalogue of providers. The legal bases are: performing the service you asked for (wallets, purchases, receipts, results), and our legitimate interest in keeping the service secure, preventing abuse and listing providers from public information.
Who receives it
- The provider your agent buys from receives what the agent sends for that call (for example a search term or an image prompt).
- The payment facilitator and the Base network receive payment data: addresses, amounts and signatures.
- Our hosting provider, Railway (Railway Corporation, United States), stores the database and files. This can involve processing outside the European Union.
How long we keep it
Wallet and purchase records are kept while the wallet is in use and for up to 12 months after its last activity. Result files are kept for up to 90 days. Request logs are kept for up to 30 days. Preview data may also be reset earlier. Records on the network itself cannot be deleted.
Your rights
You can ask to see, correct or delete your data, to restrict or object to its use, or to receive a copy. Write to [contact address: to be confirmed]. You can also complain to a data protection authority; in Lithuania that is the State Data Protection Inspectorate.
Providers named in the catalogue can correct or remove their listing as described on the provider listings page.