Effective October 11, 2026, with Terms of Service Version 1.7. Applies to the NanoBase™ API at api.nanobaselabs.com, its MCP connector (https://api.nanobaselabs.com/mcp) and the AI apps you connect to it. Read it with section 9 of the NanoBase™ API Terms of Service (Data handling and privacy). If this page and the Terms differ, the Terms control.
This policy covers only the NanoBase™ API and its connector. Other Pensive Beauty® Nanoscience Labs services, such as the NanoBase™ AI Chemist, have their own terms.
The NanoBase™ API is operated by Pensive Beauty, LLC, a Florida limited liability company doing business as Pensive Beauty® Nanoscience Labs ("Pensive Beauty", "we", "us"). It is a business service: accounts are for businesses and the people who work for them. Contact: team@pensivebeauty.com.
We do not store your formulas. Formula inputs your software or AI app sends are used only to compute the answer and are then discarded. We never receive your conversations with Claude, ChatGPT or any other AI app.
submit_ingredient tool (REST: POST /ingredients/submit) or, over REST, with a counted check: for an ingredient the library does not list, its INCI name, any grade, the properties sent, and the full text and details (type, supplier, date, link) of any supplier document sent with them (TDS, SDS, CoA or specification sheet), with the time and a one-way pseudonymous identifier, never your formula, your other lines, percentages or your identity in clear. We use the facts and properties in a submission, confirmed against any supplier document sent with it, to maintain the ingredient library for all users. The document text and link are never published, displayed, returned in any answer or distributed to other users or third parties; we apply only the facts and properties they contain. Supplier documents are business documents about an ingredient that suppliers make available to businesses; any supplier business contact details in them, as published by the supplier, are kept as part of the document and are never distributed. Each submission carries a one-way pseudonymous account identifier: the alerts we send ourselves name only that pseudonym, and the submitting account is visible only to Pensive Beauty® Nanoscience Labs, on request in our owner dashboard, for review; it is never shown to other users. Each account can add up to 1 MB of new supplier document text a day and 20 MB in total; text over the limit is not stored. One submission backed by a supplier document whose text names the ingredient, or the agreement of at least two different accounts, can update the library for all users, and Pensive Beauty® Nanoscience Labs may approve, edit, demote or reject any entry (Terms 9.9); (b) probing checks: for INCI label requests, one-way fingerprints of the ingredient names (never amounts) for about 24 hours, used only to detect Probing (Terms 9.2); (c) refused requests: the text of a request refused as seeking Protected Information (Terms 9.2).nbd), a one-way browser fingerprint, your IP address, network provider, approximate country from the IP address, and whether the connection appears to come from a VPN, proxy, Tor or data-center network. Device, browser and network identifiers are stored as keyed one-way hashes. Sign-up records keep the IP address, network provider and browser information.nb_acct that keeps you signed in to your API account.| Information | Kept for |
|---|---|
| Account record, plan and Terms acceptance records | While the account is active. After you ask us to delete it, within 30 days, except what we must keep to prevent abuse, enforce the Terms or meet legal obligations (Terms 9.7) |
| Sign-up application records | 2 years |
| Device and browser identifiers (hashed) | 2 years; network identifiers (hashed) 90 days |
| Monthly usage counters | 62 days (the lifetime run count stays with the account) |
| Refusal logs | 1 year (Terms 9.2 and 9.6) |
| Daily strike counters; per end-user suspension records | 40 days; 90 days |
| Ingredient name fingerprints for label requests | About 24 hours |
| Ingredient Submissions, including the full text of supplier documents sent with them (with any supplier business contact details they contain) | As long as the library uses them (Terms 9.9) |
| Email sign-in links | 15 minutes, single use; the account session cookie lasts 4 hours |
| Connected app registrations | 1 year |
| Connected app tokens | Authorization codes 60 seconds; access tokens 1 hour; refresh tokens 30 days, replaced on each use; the connection record 30 days after its last use or after it is disconnected |
| Payment event log; subscription references | 90 days; about 26 months |
| Order and entitlement records (order references, top-up and program credits) | 400 days |
| Replaced API key map (old key to new key, so a replaced key gets a clear answer) | 400 days |
| Order notification emails we receive | 30 days |
Security and abuse-prevention information is kept for up to 24 months in any case, or longer where needed to enforce the Terms or meet legal obligations (Terms 9.6).
Pensive Beauty, LLC is the controller. We process account and usage information to provide the service you signed up for (contract); security, abuse-prevention and refusal information on the basis of our legitimate interests in security, fraud prevention and the protection of our trade secrets (Terms 9.7); supplier documents sent with Ingredient Submissions, including any supplier business contact details they contain as published by the supplier, on the basis of our legitimate interest in verifying ingredient data (they are never distributed; Terms 9.7 and 9.9); and information we must keep by law (legal obligation). The device identifier is stored or read because it is strictly necessary to provide a secure service you request. Subject to applicable law, you may ask to access, correct or delete your information, object to its processing, and where the law gives these rights, restrict it or receive a copy. You may also complain to your local data protection authority. Information is processed in the United States and by our service providers wherever they operate.
We do not sell or share personal information and do not use it for targeted advertising. You may ask to know what personal information we hold about you, and to correct or delete it, by writing to team@pensivebeauty.com. An authorized agent may ask for you with proof of authority. We will not treat you differently for using these rights.
The NanoBase™ API is a business service and is not for anyone under 18. We do not knowingly collect information from children; if we learn we have, we delete it.
API keys are stored only as one-way fingerprints and cannot be recovered; access tokens, refresh tokens and client secrets for connected apps are stored hashed; all traffic uses HTTPS.
We will post any update on this page with a new effective date. If a change is material, we will also email account holders.
Pensive Beauty® Nanoscience Labs (Pensive Beauty, LLC), team@pensivebeauty.com. Terms of Service: https://api.nanobaselabs.com/terms.