Privacy Policy

At EdgeWrap, we are dedicated to securing and accelerating your APIs. This Privacy Policy details how we collect, process, and protect your account data, configuration settings, and the metadata of the API traffic that transits our global edge network.

1. Information We Collect

We only collect information necessary to deliver, monitor, and billing-integrate our edge gateway services:

• Account Credentials: Email address, passwords (hashed securely), and username.
• Billing Information: Handled directly and securely by our PCI-DSS compliant third-party payment processors (Stripe/Polar). We do not store credit card details.
• API Configuration & Origin Targets: Details of your upstream origin servers, API keys, WAF rules, and cache settings.
• API Request Metadata: To render your analytics dashboard, we capture request headers, query paths, status codes, latencies, and traffic rates. We process raw request and response bodies transiently in edge worker memory (e.g. for WAF rules, Bot scoring, and Secret Shield scanning) but do not persist them.

2. How We Use the Information

The information we collect is utilized strictly for:

• Configuring and distributing your WAF rules, caching policies, and smart routing configurations across our global edge nodes.
• Compiling and displaying latency trends, cache hit rates, error counts, and logs in your client console.
• Preventing abuse, rate limit breaches, and malicious security threats (e.g. DDoS attacks, bot scraping).
• Administering subscriptions, invoices, usage metering, and service communications.

3. Data Residency & Global Processing

EdgeWrap configurations are replicated globally to keep response times under 10ms. Account databases are hosted securely in primary region nodes, while cache KV targets and temporary telemetry pipelines are distributed across cloud edge workers globally.

4. Third-Party Subprocessors

We share metadata only with essential subprocessors providing core infrastructure capabilities:

• Infrastructure Providers: Edge nodes and database nodes.
• Billing Providers: Stripe & Polar for billing management and payments.

5. Security Standards

We implement comprehensive security controls including forced TLS 1.3 for all traffic, continuous static secret checks, origin credentials masking via Secret Shield, and access separation via modern auth flows.

6. Your Data Rights & Contact

You maintain full rights to export your configurations, purge caching keys, delete analytical logs, or delete your account completely at any time. For questions regarding GDPR, data processing agreements, or general privacy practices, reach out to us at privacy@edgewrap.pro.