Terms of service

What this is

Redactor ("we", "us") removes a defined set of patterns from text you submit — email addresses, phone numbers, payment card numbers, IBANs, US social security numbers, IP addresses, vendor-prefixed API keys, JSON Web Tokens and PEM private key blocks — and optionally returns a mapping that lets you restore them. You ("you", "the customer") pay per call at the rates published on our pricing page. We are an independent Ounie product.

Billing

There is no subscription. Calls are billed in Ounie credits (1 credit = 1¢) from your shared Ounie wallet at 1 credit per 10,000 characters, rounded up. Credits are reserved before a run starts, so a call can be refused for insufficient credits but can never overdraw. A run that fails refunds the reservation in full and automatically, to the exact pools it was drawn from.

A document that contains nothing we detect is a real result and is billed. Rehydrating is a separate call and is billed the same way, because it executes. Reading a run you have already paid for, listing your history, and asking what the engine detects are free.

Keyless x402 calls are paid per call in USDC on Base. A request we can see is invalid — an unsupported entity, an unknown mode, an over-cap payload, a malformed mapping — is refused before any price is quoted. Otherwise the payment is verified before the run and settled after it. A settled x402 payment is final and cannot be refunded.

What this is not — read this one

This is not a compliance control, and it is not legal advice. It removes the specific, well-defined patterns listed above and it tells you plainly which categories it does not detect — person names, postal addresses, dates of birth, passport and national ID numbers, bare account numbers, and generic high-entropy secrets among them. Whether running text through this service satisfies your obligations under GDPR, HIPAA, PCI-DSS, or any contract you have signed is a question for someone qualified to answer it, and the honest place for them to start is the not-detected list.

A clean result is not proof that a document is clean. It means nothing in the detected set was found. Every response carries the not-detected list and an unsure count precisely so that a clean output cannot be mistaken for an empty document. Do not present our output as certification that personal data has been removed.

We cannot recover a lost mapping. It is generated inside the request and returned to you; no copy is kept. If you lose it, the original values are unrecoverable. Masked text is irreversible by design.

Retention

We do not store the text you submit, the redacted output, or the token mapping — including in logs. We store a row of counts per run (characters, findings by type, unsure count, credits, timestamps) so that your history and your billing are legible. See our privacy policy for the detail.

Acceptable use

You are responsible for having the right to process the text you submit. Do not use the service to build dossiers on private individuals, and do not present our output as a compliance certification, a legal opinion, or a guarantee that a document is free of personal data — including by quoting a finding count without the not-detected list that qualifies it. Do not attempt to discover endpoints we have not documented, bypass rate limits, or resell raw access to the service.

Availability

The engine runs in this service with no third-party provider in the path, which removes most of the ways this kind of product usually fails. It does not remove all of them. We cannot guarantee uninterrupted availability, and a run that fails refunds automatically.

No warranty

The service is provided as-is, without warranty of merchantability, fitness for a particular purpose, or non-infringement. The published precision and recall figures are measured against our own labelled corpus, are described as such wherever they appear, and are not a warranty of performance on your documents.

Refunds

Failed runs refund automatically — the credit reservation is reversed to the exact pools it was drawn from. For anything else, open a support ticket.

Liability

Our liability is capped at the amount you paid us in the prior 12 months. We are not liable for indirect, incidental, or consequential damages, including any loss arising from your reliance on a redaction result or from a category this service does not detect.

Termination

Either party can terminate at any time. We may suspend accounts for material violations of these terms with notice.

Contact

/contact · routed to ounie@ounie.com