Privacy Policy
Pending final legal review.
Who we are #
Peaknode Labs LLC (“Peaknode”, “we”) runs peaknode.ar, the dashboard at app.peaknode.ar, and the API at api.peaknode.ar. This policy explains what personal data we handle and why. Contact us at [email protected].
We act in two roles:
- Controller for data about visitors to our website and the people who use Peaknode accounts.
- Processor for customer data that operators upload to build liability commitments. The operator is the controller of that data and decides how it is used; we process it only on their instructions.
Data we collect #
Website visitors. Our servers and our network provider, Cloudflare, receive standard request data such as IP address, browser user agent, and the pages requested. The website sets no cookies and runs no analytics or advertising scripts. It requests public network status from our API without cookies.
Account users. Name, work email address, organization, role, sign-in and multi-factor authentication records, API key metadata, and an audit log of security-relevant actions in your account. The dashboard uses cookies only to keep you signed in and to protect against cross-site request forgery.
Correspondence. When you email us, we keep the message and your contact details.
Operator-uploaded data (as processor). Liability files contain customer identifiers and balances chosen by the operator. We use them to build the Merkle commitment and the proofs the operator requests.
How we use data #
We use personal data to:
- provide, secure, and support the service;
- sign you in, enforce permissions, and keep an audit trail;
- send service email such as verification, password reset, and security notices;
- detect and prevent abuse, including rate limiting by IP address; and
- meet legal obligations.
We do not sell personal data and do not use it for advertising.
Service providers #
We share data only with providers that help us run the service:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Content delivery, TLS, network protection, request logs | Global |
| Resend | Transactional email | United States |
| Donweb | Server hosting for the application, databases, and file storage | Argentina |
Uploaded files are stored on our own servers, not with a third-party storage service.
International transfers #
Our servers are in Argentina, and our providers operate in other countries, including the United States. When data crosses borders, we rely on the transfer safeguards that applicable law requires.
Retention #
We keep account data while your organization’s account is active. After an account closes, we delete or anonymize its data within 90 days, except records we must keep longer for legal or security reasons, such as audit logs. Operator-uploaded liability data is kept until the operator deletes it or closes the account.
Security #
Our Security page describes how we protect data, including encryption in transit, encryption of sensitive fields at rest, and multi-factor authentication.
Your rights #
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict some processing, and to complain to a data protection authority. To exercise these rights, email [email protected]. If your data is in an operator’s liability file, we will pass your request to that operator, since they control that data.
Children #
The service is for businesses and is not directed to children. We do not knowingly collect data from anyone under 16.
Changes #
We will post changes here with a new “Last updated” date and email account owners about material changes.