Iteradian

Privacy Policy

Version 2026-10-06 · Effective 6 October 2026

Your privacy matters to us. This policy explains what data we collect, how we use it, and what control you have.

This policy is issued by CommRaDian, a business registered in Israel, of Caesarea, Israel, operating the Iteradian service. It should be read with our Terms of Service and our Data Processing Addendum.

1. Information We Collect

Account Data

Name, email address, and payment information when you create an account.

Usage Data

API request counts, IP addresses, request timestamps, and response codes to provide our services and enforce plan limits.

Device Data

Browser type, operating system, and device identifiers for security and analytics purposes.

2. How We Use Your Information

Service Delivery

Provide and maintain our RPC infrastructure services and process API requests.

Billing

Process payments, send invoices, and manage your subscription.

Communication

Send service updates, security alerts, and respond to support requests.

Improvement

Monitor performance, analyze usage patterns, and improve our platform.

Enforcement

Enforce our terms, plan limits, and prevent abuse of the platform.

3. Data Storage & Security

Encryption

Data is encrypted in transit with TLS. Sensitive credentials and secrets (such as two-factor secrets, sign-in tokens and webhook secrets) are encrypted at rest with AES-256-GCM. Our infrastructure runs behind Cloudflare, and payments are processed by Stripe, a PCI DSS Level 1 certified provider; we never store card details.

API Key Security

API keys are hashed with HMAC-SHA256 and passwords with bcrypt before storage. Raw keys are never persisted.

Log Retention

Usage logs are retained for 90 days for service monitoring, then automatically purged.

Infrastructure

Our servers are hosted by Contabo GmbH in the European Union. Backups are automated.

4. Third-Party Services

Payment Processing

Payments are processed by Stripe, a PCI DSS Level 1 certified provider; we never store card details.

Subprocessors

We use these subprocessors: Contabo GmbH (servers), Cloudflare, Inc. (DNS, CDN and DDoS protection), Stripe, Inc. (payments), Resend or the configured SMTP provider (email), Google LLC / GitHub, Inc. (optional sign-in), Grafana Labs (monitoring, when enabled), and Anthropic / OpenAI / Google / xAI (AI features, only when used). The same list, with when each is used, is in our Data Processing Addendum at /dpa.

No Data Sales

We never sell, rent, or trade your personal information to third parties.

5. Your Rights

Access

Request a copy of all personal data we hold about you.

Correction

Update or correct inaccurate personal information.

Deletion

Request complete deletion of your account and associated data.

Portability

Export your data in a standard machine-readable format.

Opt-out

Unsubscribe from marketing communications at any time.

6. Cookies

Essential

Authentication tokens and session cookies required for service operation.

Analytics

Optional analytics cookies to understand usage patterns. Can be disabled in browser settings.

Preferences

Theme and language preferences stored locally for a better experience.

7. Policy Changes

Notification

Significant changes will be communicated via email at least 30 days in advance.

Changelog

A version history of this policy is maintained for transparency.

Privacy questions?

Reach out and we'll respond within 2 business days.