Privacy policy.
This policy describes what PRETE9 LLC, an Ohio limited liability company operating PreteWorks API under the PreteWorks name ("we"), collects when you use the Service, why, and for how long. It is written to match what the software actually does. Contact: access@preteworks.com.
1. What we collect and why
| Data | Why | Kept |
|---|---|---|
| API key and its metadata (plan, monthly cap, creation date, and for paid keys the Stripe customer ID) | To authenticate and meter your requests | Until the key is revoked or the account is closed |
| Monthly usage counters per key | To enforce caps and show you usage | Rolling; the current month's counter |
| Email address (paid signup only) | Given to Stripe to create your billing profile; we do not store it ourselves | Held by Stripe for billing |
| Content you submit — PDFs, HTML, URLs — and the results | To perform the operation you requested | Processed in memory and discarded; files produced by MCP tools are stored for up to 1 hour so they can be downloaded, then deleted |
| Checkout session → key mapping | So refreshing the success page shows the same key | 24 hours |
| Request logs: timestamp, path, status, IP address, error details | Operating, securing and debugging the Service; rate-limiting the free paths by IP | Short-lived operational logs held by Cloudflare's Workers observability |
| Human-verification tokens (free tools, free-tier signup) | Cloudflare Turnstile checks that a request is from a person; we verify the token server-side | Not stored by us |
We do not run advertising or analytics trackers, do not sell data, and do not use your content to train models or for any purpose other than performing your request.
2. Processors
Cloudflare runs the Service (Workers, KV, Durable Objects, Browser Rendering, Turnstile) and therefore processes all requests, including your IP address and the pages you ask us to render. Stripe handles payment details and billing profiles; we never see your card number. The web pages load fonts from Google Fonts and the interactive reference at /docs/api loads Swagger UI from jsDelivr; those providers see your browser's request for their files. Each processor's own privacy policy applies to its handling of that data.
3. Where data is processed
Cloudflare's network is global; a request is handled at the location nearest the caller, and stored items (keys, counters, short-lived files) are held in Cloudflare's storage services. If you need processing restricted to a region, contact us before using the Service.
4. Your rights
You can see your usage at any time via GET /v1/usage or on /account, manage billing details in the Stripe portal from the same page, and stop using the Service whenever you like. To have a key revoked and its metadata deleted, or to ask what we hold that relates to you, email access@preteworks.com; we respond within 30 days. Depending on where you live you may have additional rights (access, correction, deletion, portability, objection) under laws such as the GDPR or CCPA; the same address handles those requests.
5. Security
All traffic is encrypted in transit (TLS). API keys are random, unrecoverable after issue, and checked on every request. Submitted content is processed transiently; only the short-lived items listed above are stored. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.
6. Children
The Service is for businesses and developers and is not directed at children under 16; we do not knowingly collect their data.
7. Changes
We will post updates here and change the date above. Material changes affecting paid customers are also emailed to the billing address on file.