Privacy policy

Last updated: [date]

This policy explains how [Company name], [address] ("we"), controller for the processing described here, handles personal data when you use iban.trekle.space and the IBANdb API. Contact: [privacy contact email]. [Data protection officer, if appointed].

What we process

• Account and billing data: email address, plan, subscription status and payment references, handled with our payment provider Stripe. We don't receive or store full card numbers.
• API keys and usage: the key (stored [hashed / how]), request counts per key and month for quotas and billing.
• IBANs you look up: IBANs can be personal data. They are processed to answer the request. [Whether request logs contain IBANs, and retention]. IBANs are not included in our telemetry.
• Technical data: IP address for rate limiting (demo) and security, [server log retention].

Why and on what legal basis

• Providing the Service and billing: performance of a contract.
• Security, abuse prevention and rate limiting: legitimate interests.
• Accounting and tax records: legal obligation.
• [Other purposes, e.g. product emails, with basis].

Processors and recipients

Stripe (payments and billing portal), [hosting provider and location], [email provider], [monitoring or telemetry provider]. [International transfers and safeguards].

Retention

[Retention periods for each category].

Where bank data comes from

The bank information returned by the Service is about institutions, not individuals, and comes from third-party official publishers (central banks, national payment associations, SWIFT, GLEIF and the European Payments Council) under their own terms.

Cookies

The website doesn't use tracking or advertising cookies. [Confirm; list any cookies set by Stripe checkout or other tools]. Fonts are loaded from Google Fonts, which receives your IP address when the page loads. [Keep, self-host or disclose].

Your rights

You can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests, by writing to [privacy contact email]. You can also complain to a supervisory authority, such as [competent authority].