1. Data Controller & Corporate Identity
ipscope (https://ipscope.io) is owned and operated by Badele LLC (https://badele.co), a limited liability company organized under the laws of the State of Wyoming, United States, with its Registered Agent located at 30 N Gould St, Sheridan, WY 82801, United States (“Badele LLC”, “ipscope”, “we”, “us”, or “our”).
For the purposes of the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Turkish Personal Data Protection Law (KVKK No. 6698), and other applicable data protection laws, Badele LLC acts as the Data Controller for customer account information and public internet routing datasets, and as a Data Processor / Service Provider with respect to IP addresses queried by our customers through the Lookup API.
2. Categories of Data We Process
We strictly separate customer account data from the public network-infrastructure metadata compiled into our IP intelligence datasets:
| Category | Data Elements | Purpose & Legal Basis |
|---|---|---|
| 1. Customer Account Data | Email address, display name, OAuth/Firebase user UID, hashed API key tokens (SHA-256), and quota counters. | Account authentication, API request authorization, quota enforcement, and transactional service notices (Contractual necessity). |
| 2. Billing & Tax Records | Stripe Customer ID, subscription status, invoice history, billing address, and business Tax ID / VAT number (if provided). | Subscription billing, prorated upgrades, prepaid wallet accounting, and statutory tax compliance (Contractual & legal obligation). |
| 3. IP Intelligence Dataset | Publicly routable IP addresses, network operator metadata, and regional geolocation attributes. | Providing network-level geolocation and security classification for fraud prevention, cybersecurity, and localization (Legitimate interest). |
No Consumer Profiling or Personal Identity Mapping: Our IP intelligence databases map IP addresses only to network-level infrastructure and regional locations. We never associate IP addresses in our dataset with natural persons’ names, residential street addresses, email addresses, phone numbers, or web browsing histories.
3. API Traffic & Ephemeral Lookup Processing
When your servers or applications query api.ipscope.io:
- In-Memory Radix-Tree Resolution: The target IP address passed in your API request is resolved against our in-memory database solely to return the requested JSON payload.
- No Cross-Customer Data Mining: We never sell, rent, or share the IP addresses your application queries with third parties, advertisers, or data brokers, nor do we use your customer lookup traffic to build consumer marketing profiles.
- Operational Telemetry & Rate Limiting: We maintain aggregate request counters per API key and short-lived operational/security logs (rotated within 30 days) strictly to enforce rate limits, bill prepaid wallet overages accurately, and defend against DDoS or credential-stuffing attacks.
4. Cookies & First-Party Browser Storage
We do not load third-party advertising networks or cross-site tracking pixels on ipscope.io. We use minimal first-party cookies:
- Strictly Necessary Cookies (
ipscope_cookie_consent,ipscope-theme,ipscope-docs.lang): Store your cookie consent decision, dark/light interface preference, preferred SDK language, and authenticated dashboard session state. - Optional Telemetry Preferences: Controlled entirely via your consent banner. You can review or change your preferences at any time by clicking .
5. Subprocessors & Payment Card Security
Payment Security (Stripe): All credit card payments, subscriptions, and wallet top-ups are processed directly by Stripe, Inc. on Stripe-hosted pages (checkout.stripe.com and billing.stripe.com). Badele LLC never receives, transmits, or stores raw payment card numbers or CVV security codes.
| Subprocessor | Role & Purpose | Processing Location |
|---|---|---|
| Stripe, Inc. | PCI-DSS Level 1 payment processing, subscription invoicing, and tax ID management. | United States & Global |
| Google LLC (Google Cloud Platform & Firebase) | Cloud compute infrastructure, Google Cloud Storage (GCS) for signed database snapshot downloads, and Firebase Authentication (passwordless magic-link & OAuth sign-in). | United States & EU |
| Cloudflare, Inc. | Domain DNS, Anycast routing, DDoS mitigation, WAF, and TLS edge security. | Global Edge Network |
6. International Data Transfers & Remote Operations
Badele LLC is incorporated in the State of Wyoming, United States, and operates as a remote-first technology company with engineering and administrative operations conducted from outside the United States (including Türkiye) and cloud infrastructure deployed in United States and European Union data centers.
Where personal data originates from the European Economic Area (EEA), the United Kingdom, Switzerland, or Türkiye and is transferred across borders, we rely on the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and strict technical safeguards including TLS 1.3 encryption in transit, SHA-256 credential hashing, and role-restricted infrastructure access.
7. Your Privacy Rights & IP Data Corrections
Depending on your jurisdiction (including under GDPR, UK GDPR, CCPA/CPRA, and KVKK), you have the right to:
- Access & Portability: Request a copy of the account and billing metadata we hold associated with your email address.
- Correction: Update your display name in the Dashboard or your billing/tax details via the Stripe Customer Billing Portal.
- Deletion (Right to Erasure): Request permanent deletion of your ipscope account and revocation of all associated API keys by emailing contact@ipscope.io (subject to statutory retention of tax invoices required by law).
- IP Data Corrections: Network administrators or individuals who wish to submit an IP geolocation update or opt-out request may email abuse@ipscope.io or use the Correction tool in the Dashboard.
8. Privacy Contact & Official Notices
For any privacy requests, GDPR/KVKK/CCPA inquiries, or data protection questions, please contact Badele LLC electronically or via our Registered Agent address:
30 N Gould St
Sheridan, WY 82801
United States of America
Company Website: https://badele.co
Product Website: https://ipscope.io
Privacy & Support Email: contact@ipscope.io
Network Abuse & Opt-Out: abuse@ipscope.io