Privacy notice
Last updated: 13 November 2026
Who is responsible
LOGICANCE S.L., NIF B93934537, Calle Jesús 81, Esc. A, 2º, Pta. 6, 46007 Valencia, Spain, is the controller of the personal data described here. Contact for privacy questions and requests: info@logicance.com.
For personal data inside the queries a business customer sends to the API, the customer is the controller and we act as its processor under the Data Processing Agreement.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Account data: email address, password (stored only as an argon2id hash), account type, company or full name, country | To open and run your account and let you sign in | Contract (GDPR Art. 6(1)(b)) |
| Security data: session records (stored only as a hash of the session token), two-step sign-in settings (the secret encrypted), recovery codes (stored as hashes), records of sign-ins, key creation and settings changes with no content | To keep your account and keys secure and investigate misuse | Legitimate interest in security (Art. 6(1)(f)) |
| Rate-limit records: short-lived counters keyed by a one-way code made from your IP address or email; never the address itself | To stop password guessing and sign-up abuse | Legitimate interest in security (Art. 6(1)(f)) |
| API keys: a fingerprint (SHA-256) of each key, its name, its last 4 characters, creation and last-use dates | To check requests and show you your keys | Contract |
| Usage counts: per key, endpoint and hour: requests, billable requests, units, errors, refusals, answers with no results. No query text, no results, no IP address | Billing, limits, the Usage page and service quality | Contract; legitimate interest in running the service |
| Billing data: legal name, address, invoice email, VAT number and the result of its check in the EU VIES register, purchases, credit balance, invoices | To bill you and meet tax law | Contract; legal obligation (Art. 6(1)(c)) |
| Emails we send you: sign-in links, security notices, low-credit and billing notices | To run the service | Contract; legitimate interest in security |
Your queries. The API uses the queries and parameters you send only to answer them, in memory. Neither the API nor the search engine behind it writes query text to a log or a database, and we never use queries to train models or to improve ranking.
Cookies. The console sets only cookies it needs to work: a session cookie, a form-protection cookie and a short-lived notice cookie. No analytics, no advertising, no tracking pixels, no third-party scripts. These cookies need no consent.
Who receives data
We do not sell personal data and we do not share it for anyone's marketing. These companies process it for us:
- Hetzner Online GmbH, Germany: hosting of the API, the console and their databases, in Germany.
- Stripe Payments Europe, Limited, Dublin, Ireland: payments, invoices and tax calculation. Stripe receives your billing details and payment card; we never see the full card number.
- HOSTINGER International Limited, Cyprus: our email service for the messages above, sent from servers in the EU.
- The European Commission's VIES service: when you enter an EU VAT number, we send it to VIES to check it.
During the beta we take no payments, so no data goes to Stripe until you buy credit.
Transfers outside the EU and EEA. Your queries, account data and usage counts stay in the EU. Two things can involve a country outside it: Stripe may transfer payment data to Stripe in the United States under the EU-US Data Privacy Framework, with the European Commission's standard contractual clauses as a fallback; and mail to and from our email provider passes through the network of Cloudflare, a US company (the mail we send is encrypted on the way), with MailChannels (Canada) as a possible backup relay, covered by standard contractual clauses in the provider's data processing agreement. Emails never contain your queries or your keys.
How long we keep it
- Account and security data: while the account is open.
- When you close your account we revoke your keys and erase your name, email, password, two-step data and sessions at once. We keep the account identifier, type, country, dates and content-free security records, so we can handle complaints and legal claims.
- Usage counts: 25 months.
- Billing data, invoices and VIES check records: six years, as Spanish commercial and tax law requires.
- Rate-limit records: up to one hour. Console server logs: up to 7 days, with no personal data.
- Backups: encrypted copies of the account database from the last seven nights.
Your rights
You can ask us to access, correct, delete, restrict or move your personal data, and object to processing based on legitimate interest, by writing to info@logicance.com. You can correct most account data yourself in the console. We answer within one month. You can also complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or the authority where you live.
Changes
If we change this notice in a way that matters, we email account owners before the change takes effect.