Privacy

RCO is a stateless read service with a controlled issuer write path. It has no user accounts and collects no personal information.

What the service processes

The public door answers read requests about products and markets. Requests carry tool arguments (product identifiers, market codes, record ids); none are personal data. Responses are signed public records. The service stores nothing about the caller.

Call telemetry

Standard request logs (IP address, user agent, timestamp, path) exist transiently at the serving infrastructure (Microsoft Azure, Cloudflare) for operation and abuse prevention, with retention as configured by those platforms. The governed door additionally logs authenticated tool calls.

Issuers

An issuer's published records and its registry entry are public by design; the issuer's contact details in the registry are those it chose to publish.

Cookies

None, for tracking, advertising or analytics. Contact: gsc-navigator.ai.