Data and subprocessors
This page lists where our data lives and who receives it. The privacy policy is the governing text.
Data residency
We run the API and its database on AWS in the us-east-1 region, in the United States.
Names, payments and FAS-1 anchors that reach a public blockchain are not in any one region. Every node on that chain holds a copy.
Subprocessors
| Provider | Purpose | Data it receives |
|---|---|---|
| Amazon Web Services | Hosts the API and the database. | All data that the API stores. |
| Cloudflare | Serves DNS for our domains and routes email sent to them. | DNS queries and email sent to our addresses. |
| Vercel | Hosts the Xaman xApp frontend. | Request metadata for the xApp. |
| Resend | Sends API key verification email. | The email address on the request. |
| Pinata | Stores NFT metadata on IPFS. | Public NFT metadata. |
| Coinbase Developer Platform | Acts as the x402 facilitator on some rails. | The signed payment payload. |
| XRPL Labs (Xaman) | Presents sign requests in the Xaman wallet. | The sign request and the wallet address. |
| MoonPay | Runs the fiat on-ramp when it is on. | MoonPay collects buyer data directly. |
| Google Analytics and Meta Pixel | Measure traffic on the marketing site. | Page visits, browser data and cookie identifiers. |
Data subject requests
You can ask us to delete your API key request email. You can also ask for a list of the metadata that we hold for your key.
- Email privacy@dnsofmoney.com from the address on the request.
- Name the API key or the request that you mean.
We cannot change or remove records on a public blockchain.
Software bill of materials
We publish a CycloneDX SBOM. It lists the direct dependencies that requirements.txt pins. It does not list transitive packages.