Data Processing Agreement

Last updated: 23 October 2026

This agreement is part of the Terms of Service between you (the customer and controller) and Minori LLC, which runs IPScanner (the processor). It covers the personal data you send us through the API, a site integration or a form gate. It needs no signature and applies as soon as you use those features. For a countersigned copy, write to contact@ipscanner.io.

1. What we process and for how long

We check requests for you and return a verdict. That covers visitor IP addresses, user agents and request headers sent by an integration, the browser signals gate.js reads (no cookies, no browser storage), and email addresses you send to the email check. We process them for as long as your account is active.

2. Whose data

The visitors and users of your sites and apps. We do not need special-category data and you should not send it.

3. Only on your instructions

We use the data to answer your request, to show it in your dashboard and to keep the service secure. We never sell it, never use it for advertising and never build profiles of your visitors for anyone else.

4. Retention

Request logs (address, verdict and site) are kept for 365 days and then deleted automatically. Email addresses sent to the email check are not stored: only the domain and the result are logged.

5. Security

Data in transit is encrypted with TLS. The database is reachable only over a private network, and daily backups go to encrypted object storage. Staff access is limited to the people who run the service.

6. Sub-processors

Cloudflare (network, security and backup storage), Stripe (billing, account holder data only), Mailjet and Amazon SES (account email only), Zoho (support email, EU) and Sentry (error reports, with visitor addresses filtered out). Our application and database servers run on rented hardware in Denmark (EU) that we operate ourselves. We announce a new sub-processor on this page 30 days before it starts.

7. Transfers out of the EEA, UK and Switzerland

Minori LLC is a US company. Transfers rely on the European Commission's Standard Contractual Clauses (module 2, controller to processor), which are part of this agreement, with the UK addendum for UK data.

8. Help, breaches and audits

We help you answer requests from data subjects. We tell you without undue delay, and within 72 hours, after we become aware of a breach affecting your data. Once a year we answer your security questionnaire and give you what you need to show compliance with Article 28 GDPR.

9. When it ends

When you close your account we stop processing your data. Remaining log rows are deleted on the 365-day schedule in section 4, unless the law requires us to keep them.

Processor

Minori LLC, 1209 Mountain Road Pl NE Ste N, Albuquerque, NM 87110, United States. Email: contact@ipscanner.io.

    Data Processing Agreement (DPA) | IPScanner