Nothing, by default. The public API and MCP server require no account, no email, and no personal data. We do not set tracking cookies on API endpoints.
Standard server logs (IP address, timestamps, requested endpoint) are retained briefly for rate limiting and abuse prevention only. IPs are used to enforce published rate limits; they are not sold, shared, or used for profiling.
We keep aggregate product-demand counts only: a running count, per product identifier (e.g. ASIN) and per day, of how many times it was looked up. No IP addresses, no user or agent identifiers, no request contents, and no identifiers of any kind are stored alongside these counts — ever. A count of "ASIN B0XXXXXXXX was checked 34 times on Oct 10" is the entire record. These counts exist to prioritize which products stay fresh in the corpus (demand-weighted indexing) and to publish aggregate demand signals. They cannot be traced back to any person, agent, or request.
If you request a free API key, we store the email address you provide solely to issue the key and send service notices. No payment data is collected (the key is free). You can request deletion at any time.
Store scans fetch publicly accessible pages (robots.txt, llms.txt, storefront HTML) and publish scores about the business — not about individuals. No personal data is collected from store pages.
Privacy questions: privacy@gobuy.ai