Privacy Policy

1. Introduction

IPAbuse.org ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Name and email address during account registration
• Contact information when you communicate with us
• Payment information for premium services (processed by third-party payment processors)
• Profile information and preferences

2.2 Usage Information

We automatically collect certain information:

• IP address and browser information
• Device information and operating system
• Pages visited and features used
• API usage statistics and request logs
• Cookies and similar tracking technologies

2.3 Report Information

When you submit IP abuse reports, we collect the reported IP addresses, abuse categories, descriptions, and any supporting evidence you provide. This information becomes part of our public database.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process your transactions and manage your account
• Send administrative information and updates
• Respond to your inquiries and support requests
• Monitor and analyze usage patterns and trends
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Send marketing communications (with your consent)

4. Information Sharing and Disclosure

4.1 Public Information

IP abuse reports you submit become part of our publicly accessible database. This is essential for our service to function as a community-driven threat intelligence platform.

4.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as hosting, analytics, payment processing, and customer support. These providers are contractually obligated to protect your information.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using SSL/TLS
• Secure authentication and API key management
• Regular security audits and updates
• Access controls and monitoring
• Employee training on data protection

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. You can control cookies through your browser settings, but disabling them may affect functionality.

7. Your Rights and Choices

You have the right to:

• Access and receive a copy of your personal information
• Correct inaccurate or incomplete information
• Request deletion of your account and personal data
• Object to or restrict certain processing activities
• Opt-out of marketing communications
• Export your data in a portable format

To exercise these rights, please contact us at privacy@ipabuse.org

8. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases (Article 6 GDPR):

• Contract performance — processing necessary to provide our services when you register an account or subscribe to a plan
• Legitimate interests — operating and improving the platform, preventing fraud, and maintaining the security of our threat intelligence database
• Consent — sending marketing emails and placing non-essential analytics cookies (you may withdraw consent at any time)
• Legal obligation — retaining records as required by applicable law

9. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Abuse report data is retained indefinitely as it forms the core of our threat intelligence database.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Right to Lodge a Complaint

If you are located in the EEA and believe we have processed your personal data unlawfully, you have the right to lodge a complaint with your local data protection authority (DPA). A list of EU DPAs is available at edpb.europa.eu. We encourage you to contact us first so we can resolve your concern directly.

12. Automated Decision-Making

We do not make decisions about you solely based on automated processing that produce legal or similarly significant effects. IP reputation scores are informational and determined by community reports combined with our analysis — no automated decision restricts your rights.

13. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our website. Your continued use after changes constitutes acceptance.

15. Contact Us

If you have questions or concerns about this Privacy Policy: