Privacy Policy
1. Data Controller
Neivi Innovacion Tecnologica, S.L.
CIF: ESB87387775
Registered office: Madrid, Spain
Email: hello@eneriqx.com
2. What Data We Collect
When you use IQX Lookup, we collect the following categories of personal data:
- Account data: email address, hashed password, display name
- API usage data: endpoint called, HTTP status, response time, timestamp, API key identifier
- Request metadata: IP address (for rate limiting and geolocation), User-Agent header
- Analytics cookies: pseudonymous identifiers set by Google Analytics (see our Cookies Policy)
We do not store the content of your validation queries (e.g., the email addresses or phone numbers you validate). Query parameters are processed in memory and discarded after the response is sent.
3. Purposes and Legal Basis
| Purpose | Data | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Provide the validation API service | Account data, API usage | Performance of contract (Art. 6.1.b) |
| Enforce rate limits and quotas | IP address, API key | Legitimate interest (Art. 6.1.f) |
| Display usage analytics in dashboard | API usage data | Performance of contract (Art. 6.1.b) |
| Send transactional emails (verification, password reset) | Email address | Performance of contract (Art. 6.1.b) |
| IP geolocation enrichment | IP address | Legitimate interest (Art. 6.1.f) |
| Website analytics (Google Analytics) | Pseudonymous identifiers, browsing data | Consent (Art. 6.1.a) |
4. Data Retention
- API usage analytics: 90 days
- Account data: until you delete your account
- Analytics cookies: up to 14 months (see Cookies Policy)
- Server logs: 30 days
During the alpha period, all data may be purged without prior notice.
5. Third-Party Processors
| Processor | Purpose | Location |
|---|---|---|
| Google Analytics (Google LLC) | Website analytics | United States |
| SendGrid (Twilio Inc.) | Transactional email delivery | United States |
| MaxMind Inc. | IP geolocation (GeoLite2) | United States |
| Firebase Hosting (Google LLC) | Website hosting | European Union |
We do not sell your data to third parties. We do not use your data for advertising.
6. International Transfers
Some of our processors (Google, SendGrid, MaxMind) are based in the United States. These transfers are protected by the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs) adopted by the European Commission, in accordance with GDPR Chapter V.
7. Your Rights
Under the GDPR and the Spanish Organic Law 3/2018 (LOPDGDD), you have the following rights:
- Access — obtain confirmation of whether your personal data is being processed and access it
- Rectification — correct inaccurate or incomplete personal data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Restriction — request limitation of processing
- Data portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — withdraw consent at any time (for cookie analytics) without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at hello@eneriqx.com. We will respond within one month.
8. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Espanola de Proteccion de Datos — AEPD):
www.aepd.es
C/ Jorge Juan, 6 — 28001 Madrid
9. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
10. Alpha Service Disclaimer
IQX Lookup is currently in alpha. Data handling practices may evolve as the service matures. We will update this policy accordingly and notify registered users of material changes.
11. Contact
For any privacy-related inquiries:
hello@eneriqx.com