Privacy Policy

Covers all CompassLab APIs: Email Validator, Phone Number Validator, Public Holidays and Business Days, Article Extractor (formerly Web Content Extractor), Link Preview, Website Contact Extractor, Social Links Finder, Website Technology Stack Detector, QR Code and Barcode, PDF to Text, EU VAT & IBAN Validator, Product Photo Toolkit and Text to Speech, and our n8n nodes that call them.

Last updated: 2026-10-03

Operator: CompassLab, Morocco. Contact: jaouchamouad@proton.me

What we process

• Your requests: the IBANs, VAT numbers, amounts and country codes (VAT & IBAN Validator) the email addresses (Email Validator) or the web page URLs (Web Content Extractor) you send. Email addresses are usually personal data.
• VIES results: when you ask for a live VAT check, we query the European Commission's VIES service. It returns the registered name and address of the business. For sole traders, this is personal data.
• Web pages: the Web Content Extractor fetches the public page at the URL you send and returns its content to you. Pages can contain personal data published by their owners; we process it only to answer your request.
• Business contact data: the Website Contact Extractor reads a company's public website and returns the business contact points it publishes (generic email addresses, phone numbers, official social profiles, legal-notice details). It does not return email addresses that look like a named person, or personal social profiles. We keep no database of results.
• Images and text: photos (Product Photo Toolkit), code images (QR & Barcode) and text to speak (Text to Speech) are processed in memory only. Photo metadata such as GPS is removed. Images are never stored; speech results are kept in memory for at most 10 minutes so you can download them, then deleted.
• Account and billing data: the marketplace you subscribed through (api.market or RapidAPI) handles your account, API key, usage and payment. We do not receive your card details. See that marketplace's privacy policy.

How long we keep it

• We do not store request contents in a database or in log files.
• For each API call our logs keep only the endpoint, the status, the duration, the marketplace, whether the call came from our n8n nodes, and a hashed customer id. We keep daily totals per API (with those hashed ids) for up to 12 months to run and improve the service; log lines themselves are deleted after a few days.
• Email addresses are checked and discarded. Only the domain's mail-server (MX) answer is kept in memory, for up to 1 hour.
• Extracted page results are kept in memory for up to 10 minutes (keyed by a hash of the URL) so repeated requests are fast, then deleted. We never write page content to disk or logs, and we do not build an index of the web.
• VIES results are kept in memory for up to 24 hours so repeated checks are fast and the VIES service is not overloaded. They are deleted when they expire or when the service restarts.
• Our hosting provider keeps technical logs (time, status code, response time) for operations and security. These logs do not contain your IBANs, VAT numbers, email addresses or the URLs you send.

Why we process it (legal basis)

To provide the service you requested (GDPR Art. 6(1)(b)). Public register data is processed in our legitimate interest in providing VAT checks (Art. 6(1)(f)).

Who else sees it

• European Commission (VIES): receives the VAT numbers you ask us to check live.
• DNS: to find a domain's mail servers we send the domain name (never the full address) to public DNS resolvers. We never contact the mail server or send email.
• Websites you ask us to read: receive a normal page request from our crawler (identified as CompassLabBot; see the /bot page of the Web Content Extractor), including the URL you sent.
• Hosting: Render Services, Inc. (servers in Frankfurt, EU).
• Marketplace: api.market or RapidAPI, for authentication, billing and usage counts.

We do not sell data or use it for advertising or AI training.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your personal data, and you can object to its processing. Write to jaouchamouad@proton.me. You can also complain to your national data protection authority.

Changes

We will update this page if our processing changes. The date at the top shows the latest version.