IPWho.org privacy & data

Controller: When you create a Lavrox account, enter billing details, or use our Dashboard/websites, we are the controller of that account and interaction data. Processor: When your application sends your end-users’ data (e.g. an IP address sent to the IPWho API) to us, you are the controller and we act solely as your processor under our Data Processing Addendum .

name, email, company, credentials

billing details (processed by our payment provider — we do not store raw card numbers)

device and network data such as IP address, browser, OS, and referring URLs

Dashboard and API usage telemetry, request volumes

your support communications

Provide accounts, process payments, operate the platform

Prevent fraud/abuse, enforce limits, secure & debug the Service

Improve and develop the Service

Direct marketing (with opt-out)

Identifiable infrastructure logs: 30–90 days, then deleted (except records held for an active security investigation or as law requires).

Account & billing data: for the life of your subscription and afterwards as needed for audit, tax, dispute-resolution, and enforcement purposes, unless you request deletion and no legal exception applies.

Data may be routed to and processed at any origin server within our network (across North America, Europe, Asia Pacific, the Middle East, Latin America, and Africa, and future locations)

We rely on appropriate safeguards, including Standard Contractual Clauses, for cross-border transfers.

Subprocessors Notice for categories (hosting, edge/CDN/WAF, payments, email, analytics, contractors)

Processor: When your application sends your end-users’ data (e.g. an IP address sent to the IPWho API) to us, you are the controller and we act solely as your processor under our Data Processing Addendum .

To exercise rights over your account data , contact privacy@lavrox.com .

Australia (APPs): access and correction

EU/UK (GDPR): access, correction, deletion, portability, restriction, and objection

You have the right to know, access, delete, and correct, and to non-discrimination for exercising these rights.

We do not sell or share personal information for cross-context behavioural advertising.