Privacy Policy

Last updated: September 30, 2026

GetIPLoc provides IP intelligence, geolocation, visitor analytics, and related API services. This Privacy Policy explains how we collect, process, retain, and protect information when you use our website, APIs, and client-side tracking scripts.

1. Roles and Scope (Data Controller & Data Processor)

Depending on the context, GetIPLoc operates in two capacities under data protection laws (such as GDPR):

• Data Controller: For account information, billing details, direct inquiries, and usage data of our registered customers and website visitors.
• Data Processor: When customers install our tracker.js script or use our APIs to process IP and analytics data of their website visitors. In this case, our customer is the Data Controller, and we process visitor data solely on their documented instructions and in accordance with our Data Processing Addendum (DPA).

2. Information We Process & Client Storage

Depending on your interactions with GetIPLoc, we process:

• Account & Contact Data: Name, business email, billing address, and authentication credentials.
• Technical & Request Data: IP address, device type, operating system, browser user-agent, approximate geolocation (country, city, ASN), pages visited, and referrer URLs.
• Client-Side Storage (sessionStorage): Our tracker.js script may utilize browser sessionStorage or temporary session tokens to maintain session integrity and prevent duplicate analytics hits. We do not use persistent cross-site tracking cookies.

3. Purpose of Processing

We process information to:

• Deliver, optimize, and maintain our geolocation and analytics services.
• Detect and prevent malicious activity, DDoS attacks, API abuse, and fraudulent transactions.
• Manage billing, subscriptions, and customer support.
• Comply with applicable legal, accounting, and regulatory obligations.

4. Data Retention

We retain personal information only as long as necessary to fulfill the operational purposes outlined in this policy:

• API and Server Logs: Standard IP and request logs are automatically rotated and purged after 30 to 90 days.
• Analytics & Visitor Telemetry: Aggregated, anonymized statistics are retained indefinitely; raw event payloads are deleted within 90 days.
• Customer Account & Billing Data: Retained for the duration of the active subscription plus required statutory tax/accounting retention periods (typically up to 7 years).

5. Your Privacy Rights (GDPR & CCPA/CPRA)

Under applicable regulations including the GDPR (UK/EU) and CCPA/CPRA (California), you have specific rights regarding your personal information:

• Access and Portability: Request a copy of the personal data we hold about you.
• Correction & Rectification: Request correction of inaccurate or incomplete records.
• Erasure ("Right to be Forgotten"): Request deletion of your personal information where no overriding legal basis requires retention.
• Opt-Out of Sale/Sharing: GetIPLoc does not sell or share personal information for cross-context behavioral advertising.

6. Exercising Your Rights & Contact

To submit a privacy or data subject request, please reach out to our dedicated privacy contact directly:

• Email: contact@getiploc.com
• General / Sales Inquiries: You may also reach us via our Contact Sales page.

We verify identities before processing rights requests and respond within the statutory timelines (typically 30 days under GDPR / 45 days under CCPA).