journalize.

Privacy Policy

Last updated: 2026-07-03

This Privacy Policy describes how Web Content Creators ("we", "us"), registered in Hong Kong (Business Registration No. 41133353) at Unit B, 12/F, Hang Seng Causeway Bay Building, Hong Kong, handles data in connection with the Journalize API and MCP server at journalize.dev (the "Service").

What we do not collect

The Service requires no account, no sign-up, and no email address. There is no login. We do not knowingly collect personal information such as your name, email, or physical address through the Service itself.

The private key we hand you — and never keep

Calling register generates an Ed25519 keypair for your ledger identity. We show you the private key exactly once, in that one response, and never store it — it exists in our systems only for the instant it takes to generate and return it. We have no way to recover it if you lose it, and no way to produce it if compelled to, because we don't have it. This is a deliberate design choice, not an oversight: see ARCHITECTURE.md if you want the technical detail.

What we do collect

  • Your public key, generated at registration and stored so we can verify your signed requests going forward.
  • The directive text you submit — literal Beancount syntax: account names, dates, amounts, currencies, and any narration text you write into a transaction. This is stored as plain, human-readable text, in full, because it's the actual content of your ledger — we don't scrub, redact, or vet it. If you put someone else's personal information into a narration field (an employee's name, a customer's address), that becomes data we hold about that third party too — that's a choice you make when you write the entry, not something we do to your data.
  • Payment data: paid calls settle via the x402 protocol using a blockchain wallet address on Base. Wallet addresses and transaction details are public on-chain by the nature of blockchain payments; we store only what's needed to verify a given payment (the transaction hash, the resource it paid for), and don't attempt to link a wallet address to your real-world identity. Note this wallet is entirely separate from your Ed25519 ledger identity above — see SKILL.md.
  • Audit logs: every request — including free ones, and failed or rejected ones — is logged with an action, an outcome, and a timestamp, for security, dispute resolution, and abuse prevention.
  • Standard infrastructure logs: like any web service, our hosting provider logs IP addresses, timestamps, and requested endpoints for security and debugging. Retained for a limited period, never sold or used for advertising.
  • No cookies, no tracking: the Service is an API and MCP server, not a browsable app with sessions.

Your ledger data belongs to you

We are a processor of your accounting records, not a claimant on them. You can retrieve the complete literal text of everything you've stored at any time via GET /export (or the export_ledger MCP tool) — we recommend doing this periodically as your own backup; see Terms for why we don't currently guarantee data durability beyond commercially reasonable effort.

Third parties involved in processing

  • Our hosting provider, which runs the infrastructure the Service runs on.
  • The x402 payment facilitator, which verifies and settles on-chain payments. It sees the payment transaction itself, not your directive data.

We do not sell data to third parties, and we do not use any data collected through the Service for advertising.

Your rights

If you believe we hold data about you — including as a third party mentioned in someone else's directive narration — and want it reviewed, deleted, or explained, contact us below. Since your ledger data is identified only by a public key with no link to a real-world identity on our end, we may need you to demonstrate control of the relevant key (a signed message) before acting on a request about it.

Changes and contact

We may update this Policy from time to time; the "Last updated" date above reflects the current version.

Contact: [email protected] Web Content Creators (Business Registration No. 41133353) Unit B, 12/F, Hang Seng Causeway Bay Building, Hong Kong