Privacy Policy
Last updated: October 2026
1. Who we are
Places API is offered by KARB bv (BE0839.593.297), located in Antwerp, Belgium. We offer an address autocomplete API for Dutch, Belgian and Luxembourg addresses.
We value your privacy and only collect data that is strictly necessary for providing our service.
2. What data we collect
Account Data
Upon registration, we collect your email address. We use this for:
- logging into your account;
- sending invoices;
- important notices about the service (maintenance, changes).
We also store your language preference and data used to secure your account, such as a password hash (if you set a password), confirmation of your email address and sign-in tokens. When you sign in through an external provider, we store the account identifier, email address, username and authentication tokens supplied by that provider. We use this data to identify you, enable secure sign-in and provide the service in your chosen language.
Billing details
For paid subscriptions, we collect billing details. Depending on whether you are an individual or a business, this may include:
- contact name;
- company name (for business customers);
- invoice address (street, postal code, city, country);
- VAT number (for business customers within the EU);
- PO reference (optional).
We use this data, to the extent necessary for the relevant purpose, for payment and invoicing administration, compliance with statutory VAT obligations and applicable retention requirements. For payment administration, the contact or company name may be shared with Mollie together with the account email address.
API Requests
For each API request we log: the API key used, the IP address of the request, the search query (postal code/address), and a timestamp. We use these logs exclusively for:
- tracking your usage against your limit;
- identifying and resolving technical issues;
- detecting abuse.
We do not analyze the content of search queries and do not use them for other purposes.
Website
Our website does not use tracking cookies, analytics or other tracking technology. We only place functional cookies necessary for the website to function (such as session cookies for login).
3. What we do not do
- We do not sell your data to third parties.
- We do not use your data for third-party advertising or marketing.
- We do not share your data with third parties, except with the processors mentioned in this policy.
- We do not track your behavior across websites.
4. Retention Periods
- API logs: 30 days, then automatically deleted.
- Account data: for as long as your account exists. When you delete your account through your dashboard, we remove your account and associated data from our application. Cancelling a subscription does not delete your account.
- Billing details: we retain the original invoice data in our bookkeeping records for the statutory retention period, including after account deletion. The invoice PDFs in our application are copies for your dashboard and are removed when your account is deleted.
5. Processors
We use the following service providers:
- Hetzner Online GmbH (Germany) - server hosting
- Scaleway SAS (France) - email delivery
- Mollie B.V. (Netherlands) - payment processing
- Billit NV (Belgium) - invoicing
All our processors are located within the EU and process data in accordance with the GDPR.
6. Your Rights
Under GDPR, you have the right to:
- request access to your personal data;
- request correction or deletion of your data;
- object to the processing;
- receive your data in a structured format (data portability).
You can delete your account and data yourself through your dashboard, or contact us with a request. Invoice data subject to statutory retention requirements remains in our bookkeeping records.
If you have a complaint about the processing of your data, you can file it with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit/GBA).
7. Contact
For questions about this privacy policy, you can contact us at:
KARB bv
BE0839.593.297
Antwerpen, België
support@places-api.com