Privacy Policy

1. Who we are

Anchorage Hub is operated by PolarPeakDigital, Inc., an Alaska corporation. We run a directory of Anchorage-area businesses and the machine-readable API (REST + MCP) that lets AI agents discover, recommend, and make bookings with those businesses.

Questions about this policy? Email [email protected].

2. Data we collect

We collect the minimum information needed to run the directory and its API:

• Business listing data — public-record name, address, phone, hours, services. Verified owners can edit their own listing through the Owner Dashboard.
• Owner account data — email address (Manus OAuth), display name, and the business slug the account is claiming. Auth is handled by Manus OAuth; we never see your password.
• API key metadata — a hashed key, the developer account it belongs to, and per-key usage counters. The raw key is shown exactly once at creation and never stored in plaintext.
• Bookings placed by agents — customer name, email, requested date, and requested service. This data is required so we can forward the booking to the business; we retain it for audit and commission reconciliation.
• Server logs — request method, URL, status code, IP, and user-agent. Retained for ≤ 30 days for abuse detection.

We do not collect: government IDs, full payment-card numbers (Stripe handles those directly), precise GPS locations, or biometric data.

3. How we use and store data

We use the data above to (a) show listings in the public directory and API, (b) authenticate business owners editing their own listing, (c) forward bookings to the correct business, (d) meter and bill API usage, and (e) detect abuse.

Data is stored in a managed MySQL/TiDB database inside the Manus platform (us-west region) with encryption in transit (TLS 1.2+) and at rest. Uploaded files (e.g., listing photos) live in object storage with signed-URL access only.

4. Third-party sharing

We share data only with the service providers we need to operate the product:

• Stripe — subscription and one-off payments for verified-business and API tiers. Stripe receives your email and payment method directly; we only see Stripe's customer ID.
• Resend — transactional email (claim links, booking confirmations, owner notifications).
• Manus — hosting, OAuth, and managed database.
• Business owners — when an AI agent books a service, the business whose listing was booked receives the customer's name, email, requested date, and service description.

We do not sell personal data. We do not run third-party ad networks or trackers on anchoragehub.ai.

5. Data retention

• Business listings: retained while the business exists.
• Owner accounts: retained until you ask us to delete them (email [email protected]); deletion completes within 30 days.
• Bookings: retained for 3 years for accounting and tax purposes, then purged.
• Server logs: ≤ 30 days.
• API key hashes: retained while the key is active; revoked keys are purged after 90 days.

6. Your rights

You can request a copy, correction, or deletion of any data we hold about you by emailing [email protected]. We respond within 30 days. Alaska residents receive the same rights as California residents under CCPA as a matter of policy, even though Alaska does not currently require it.

7. Children

Anchorage Hub is not directed at children under 13. We do not knowingly collect data from children under 13; if you believe we have, email us and we will delete it.

8. Changes

We'll announce material changes on this page and bump the "Last updated" date at the top. Non-material fixes (typos, link updates) are made silently.