Privacy Policy
How RouteMesh collects, uses, and protects your data.
Last updated: April 2026
Scope
This policy applies to the RouteMesh website at routeme.sh, the RouteMesh dashboard and account portal, and the RouteMesh RPC API.
We do not sell personal information.
A. RPC API Traffic
When you make an API call, we collect the following to operate and improve the service:
- ›An API key authenticates each request. Raw IP addresses are not stored in our application databases; our CDN and infrastructure providers may transiently log IPs for DDoS protection and routing, per their own policies.
- ›Request metadata — chain ID, JSON-RPC method, timestamp, and request/response sizes — is recorded for routing and billing purposes.
- ›The full JSON-RPC request (including method and parameters) is forwarded to blockchain nodes and returned. We record and store the request parameters for diagnostic and debugging purposes; we do not sell this data or use it for advertising.
- ›Geographic location (city, latitude, longitude) derived from your network connection is stored for latency analytics and routing optimization.
We do not extract personally identifiable information (names, email addresses, cookies) from the JSON-RPC payloads you send through the API.
B. RouteMesh Account
When you create an account, we collect the following:
Identity
Email address (required), full name, phone number, and Telegram handle (where applicable)
Organization
Org name, workspace membership details, invitation history
Billing
Payment method details (via a payment processor), credit balance, purchase history, invoices
Website behavior
Pages visited, click events, navigation paths, browser and device type, referrer, page URLs
Cookies & tracking
Session cookies for authentication, and analytics cookies for understanding how the platform is used
User-generated content
API key names, allowed domains, dashboard preferences, categories, and settings
C. How We Use Your Data
- ›Route and deliver RPC requests to blockchain nodes
- ›Authenticate accounts and API access
- ›Process payments, manage credits, send invoices
- ›Detect abuse, enforce rate limits, ensure service integrity
- ›Optimize routing performance and latency
- ›Debug issues and maintain service reliability
- ›Improve the platform and dashboard experience
- ›Communicate account-related notices (verification, billing, policy changes)
- ›Send marketing communications (only with your consent)
D. What We Do NOT Do
- ›We do NOT sell your personal information
- ›We do NOT build consumer profiles from your API traffic or on-chain data — for example, we do not infer personal interests, demographics, or behavioral patterns
- ›We do NOT collect private keys, seed phrases, or wallet secrets
- ›We do NOT share API request payloads for advertising or marketing
- ›We do NOT use API traffic data for advertising
E. Data Sharing
We share data only with trusted service providers who help us run the platform:
- ›Hosting & databases — for storing account and usage data
- ›Payment processing — for handling billing and credit purchases
- ›Email delivery — for verification, billing, and support communications
- ›Analytics & monitoring — for understanding product usage and performance
- ›CDN & security — for DDoS protection, network performance, and edge routing
All service providers are contractually restricted from using your data for their own purposes.
F. Data Retention
- ›Account data — retained while your account is active, and for a reasonable period afterward for legal and tax compliance
- ›API usage logs — retained per our operational needs; long enough for billing, billing disputes, and performance monitoring
- ›Analytics data — retained per the applicable analytics platform's retention policy
- ›Email interaction data — retained per the email service's data policy
We do not retain data longer than necessary.
G. Your Rights
Depending on your jurisdiction, you may have the right to:
- ›Access — request a copy of your personal data
- ›Rectification — correct inaccurate information (e.g., your name)
- ›Erasure — request deletion of your account and associated data
- ›Portability — export your data in a structured format
- ›Restrict or object to processing for certain purposes
- ›Opt-out of analytics — disable tracking cookies
- ›Opt-out of marketing — unsubscribe from promotional emails
- ›Lodge a complaint — contact your local data protection authority
To exercise any of these rights, contact us at k@routeme.sh.
H. Children's Privacy
RouteMesh is not intended for users under 18. We do not knowingly collect data from children.
I. Security
We use industry-standard technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and continuous security monitoring. No internet transmission is 100% secure.
J. Changes to This Policy
We may update this policy. Material changes will be communicated via email or a prominent notice on the platform. Continued use after changes constitutes acceptance.
K. Contact
Questions or requests? k@routeme.sh