Privacy

This Policy

ZEAM Labs, LLC (“ZEAM Labs”, “we”, “us”) operates the websites zeamlabs.com, zeamprism.com and zeampass.com, the Prism endpoint at mcp.zeamprism.com and the Pass services at api.zeampass.com. This policy says what they collect, why, who else receives it and how long we keep it.

The same policy is posted on all three sites. Every section is shared except the last, which covers the product of the site you are reading. The product sections of all three are part of this policy: zeamlabs.com, Prism and Pass.

The Short Version

• We keep server logs, and we review them ourselves.
• No cookies, no third-party analytics or ad trackers, no accounts and no profiles.
• We do not sell or share our logs. Cloudflare carries the traffic as our network provider.
• Your wallet address is the only persistent identifier the paid services use. We never hold your money: deposits sit in settlement contracts on Base, not with us.
• Payments settle on Base, a public blockchain. Anyone can see them.

Server Logs

We keep server logs. For each request they record the IP address, the user agent, the referring page, the page or endpoint requested, the method, the time, the status and the size. We keep them to run, secure and understand traffic to our services, including who visits and which agents call them. We review them ourselves.

Our front web server writes these logs for every site and service. They rotate daily. We keep the current day and 14 daily rotations, about 15 days, and then they are deleted. Each site’s own web server also keeps a request log with the page requested, the time, the status, the referring page and the user agent; the product section says whether it holds your IP address. Those site logs are not rotated and have no automatic deletion date.

The one exception is a request that carries a credential in its path. The product section names it, and we do not log it.

How We Use Information

• To serve and bill paid calls, and to reconcile what was charged against what settled on chain.
• To return unspent balances to the wallets that funded them.
• To enforce free limits and rate limits, and to prevent abuse.
• To keep the Service secure and to debug it.

We do not build profiles, advertise, or use it for anything else.

Who Else Receives It

We do not sell, rent, trade or share our logs or any other data. The only others who receive it are:

• Cloudflare, our network and content delivery provider. Traffic to our public sites and services passes through Cloudflare on its way to our servers, so Cloudflare sees each request, including your IP address and the full path.
• Base, the public blockchain every payment settles on. What goes on chain is public by the nature of the chain.
• Sellers you call through Pass, who receive what their product section says.
• Anyone the law requires us to disclose to.

Chain Data Is Public

Deposits, charges and returns settle in USDC on Base. The wallet addresses, the amounts and the times are public and permanent. Neither we nor you can remove them. If that matters to you, pay from a wallet you are willing to have associated with the Service.

How Long We Keep It

• Front web server logs: the current day and 14 daily rotations, about 15 days.
• Each site’s own web server log: no automatic deletion date.
• Counters for free limits and rate limits: for the hour they count, as the product section states.
• Payment records, such as channel and pass records, deposits, charges and returns: kept for accounting and to return balances. They have no automatic deletion date.
• Any other log the product section names: as long as it states there. Where it states no period, there is no automatic deletion date, and we delete it on request.
• On-chain records: permanent, by the nature of the chain.

Your Rights

You can use the websites without connecting a wallet, and you can stop new collection at any time by ceasing to use the Service.

Write to info@zeamlabs.com to ask what we hold about a wallet, a pass or a channel, or to ask us to correct or delete it. If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR, including the rights of access, correction and deletion, and you can exercise them at the same address.

We cannot delete anything on chain. Deleting a payment record before its balance is returned can stop us from returning it, so we return the balance first.

Changes

We may update this policy from time to time. Changes are posted on all three sites with the same new effective date.

Contact

ZEAM Labs, LLC · info@zeamlabs.com

A Delaware limited liability company, file number 10206382.

Prism

• zeamprism.com is static pages. It sets no cookies and runs no analytics and no third-party scripts. Its typeface is served from the site itself. Its own web server’s request log does not hold your IP address; the front web server’s log does, for the endpoint as well as the site.
• The paid endpoint at mcp.zeamprism.com asks for no name, email address, account or API key. A paying client presents a wallet address and signed payment vouchers. We keep the channel records settlement requires: the channel, the paying wallet, the amounts deposited, charged, claimed and returned, the signatures you provided, and the transactions. They have no automatic deletion date.
• We do not log the contents of your calls or what comes back. The endpoint’s own process log records its configuration, errors and settlement events. It has no automatic deletion date.
• Free limits count calls per network address and per tool for the current hour. The count is kept on disk and replaced when the next hour’s count begins. The free /verify budget is a per-address count held in memory for one hour. Anyone reaching us from the same address, such as behind a NAT or a proxy, shares the count.