Privacy Policy

Last updated: December 2025

1. Who we are

Places API is offered by KARB bv (BE0839.593.297), located in Antwerp, Belgium. We offer an address autocomplete API for Dutch and Belgian addresses.

We value your privacy and only collect data that is strictly necessary for providing our service.

2. What data we collect

Account Data

Upon registration, we collect your email address. We use this for:

  • logging into your account;
  • sending invoices;
  • important notices about the service (maintenance, changes).

Billing details

For paid subscriptions, we collect billing details. Depending on whether you are an individual or a business, this may include:

  • contact name;
  • company name (for business customers);
  • invoice address (street, postal code, city, country);
  • VAT number (for business customers within the EU);
  • PO reference (optional).

We use this data exclusively for issuing invoices, processing VAT obligations, and complying with legal retention requirements.

API Requests

For each API request we log: the API key used, the IP address of the request, the search query (postal code/address), and a timestamp. We use these logs exclusively for:

  • tracking your usage against your limit;
  • identifying and resolving technical issues;
  • detecting abuse.

We do not analyze the content of search queries and do not use them for other purposes.

Website

Our website does not use tracking cookies, analytics or other tracking technology. We only place functional cookies necessary for the website to function (such as session cookies for login).

3. What we do not do

  • We do not sell your data to third parties.
  • We do not use your data for third-party advertising or marketing.
  • We do not share your data with third parties, except with the processors mentioned in this policy.
  • We do not track your behavior across websites.

4. Retention Periods

  • API logs: 30 days, then automatically deleted.
  • Account data: as long as your account is active. Upon cancellation, we will delete your account within 30 days.
  • Billing details: 7 years, in accordance with legal retention requirements for accounting records.

5. Processors

We use the following service providers:

  • Hetzner Online GmbH (Germany) - server hosting and email delivery
  • Mollie B.V. (Netherlands) - payment processing
  • Moneybird B.V. (Netherlands) - invoicing

All our processors are located within the EU and process data in accordance with the GDPR.

6. Your Rights

Under GDPR, you have the right to:

  • request access to your personal data;
  • request correction or deletion of your data;
  • object to the processing;
  • receive your data in a structured format (data portability).

You can delete your account and data yourself via your dashboard, or contact us for a request.

If you have a complaint about the processing of your data, you can file it with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit/GBA).

7. Contact

For questions about this privacy policy, you can contact us at:

KARB bv
BE0839.593.297
Antwerpen, België
support@places-api.com