Last updated: 27 October 2026
This policy explains which personal data Everapi GmbH processes when you use numlookupapi.com: this website, its free tools, the dashboard at app.numlookupapi.com and the API.
You can print this policy at any time by using your browser’s print feature.
Everapi GmbH
Getreidegasse 22
A-2284 Untersiebenbrunn, Austria
Commercial register: FN569823a
Managing director: Dominik Kukacka
Email: office@everapi.com
Data protection officer: we have not appointed one. For privacy questions, write to office@everapi.com.
We may collect the following types of personal data, either directly or via third parties:
Each category of data collected is described in detail in the appropriate section of this privacy policy or where specifically explained before data is gathered.
Users may voluntarily provide this data, while usage data is typically collected automatically when interacting with the site.
Unless otherwise noted, all requested data is necessary for proper functionality. If users fail to provide such data, we may not be able to offer our services effectively.
Where optional data is indicated, users can choose not to provide it without affecting service quality.
If unsure about what information is required, users are encouraged to contact the Owner directly.
This website does not use cookies for analytics or advertising. The free tools set one cookie that is strictly necessary for them (see “Free tools” below). The dashboard uses cookies to keep you signed in and for analytics.
Users are solely responsible for any third-party personal data shared through this Application.
We implement suitable technical and organizational measures to prevent unauthorized access, alteration, disclosure, or destruction of personal data.
Data is processed using IT systems according to procedures closely aligned with stated purposes. Authorized personnel (such as staff in administration, marketing, legal, system operations) or the service providers listed below may access data when needed. They process personal data on our behalf.
Our servers are rented from Hetzner Online GmbH and stand in data centers in Germany. Requests reach them through Cloudflare, which handles each request in one of its data centers, usually one near you; that data center can be outside the EU. Some of the service providers listed below are in the United States. See “Transfers Outside the EU” below.
Some of our service providers are based in the United States or process data there. Where a provider is certified under the EU-U.S. Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). Otherwise, and in addition, we have agreed on the European Commission’s standard contractual clauses with the provider (Art. 46(2)(c) GDPR). You can ask us for a copy of these safeguards.
Unless otherwise stated, data is retained only as long as required for the purpose it was collected. We may keep it longer if required by law or with user consent.
We collect personal data for the following reasons:
When you send the contact form, we receive the data you entered, such as your name, email address, company and message, and use it to answer your inquiry. Cloudflare checks the form for bots (Turnstile) and delivers it to us by email.
We use these service providers to host and deliver this Application and its features, to understand how it is used and to take payments. They process personal data on our behalf.
Cloudflare, Inc.
Hosting of this website, its documentation and the free tools (Cloudflare Workers). DNS, network proxy and encryption (TLS) for the API and the dashboard, so every request to them passes through Cloudflare. Bot protection for the contact form and the free tools (Cloudflare Turnstile), delivery of contact form messages by email, and file storage.
Location: United States, global network – Refer to their Privacy Policy for details.
Hetzner Online GmbH
Servers for the API, the dashboard and our databases.
Location: Germany – Refer to their Privacy Policy for details.
PostHog Inc.
Cookieless analytics for this website: which pages are visited, clicks, the referring page, browser, device type, approximate location and page performance. PostHog sets no cookies and stores nothing in your browser. To count unique visitors, it derives a hash from your IP address and browser that changes every day. Email addresses, phone and VAT numbers and IP addresses are removed from page addresses and clicked text before an event is sent. In the dashboard (app.numlookupapi.com), PostHog also links events to your account and records sessions.
Location: EU – Refer to their Privacy Policy for details.
Stripe
Payments and invoices for paid plans. Stripe receives your billing details and payment information; we do not store card numbers.
Location: Ireland, United States – Refer to their Privacy Policy for details.
Functional Software, Inc. (Sentry)
Error tracking for the API and the dashboard. When a request causes an error, details of that request can reach Sentry, including data sent with it.
Location: United States – Refer to their Privacy Policy for details.
Postmark (ActiveCampaign, LLC)
Sending account emails, such as sign-in links, invoices and usage alerts. Postmark receives your email address and the content of the email.
Location: United States – Refer to their Privacy Policy for details.
Google
Our email (Google Workspace): messages you send us by email or with the contact form are stored in our support mailbox. Bot protection on the sign-up page of the dashboard (reCAPTCHA), which receives your IP address and information about your browser. Sign-in with Google, if you choose it.
Location: Ireland, United States – Refer to their Privacy Policy for details.
Anthropic, PBC
AI-assisted support: when you write to our support, an AI model reads your message, its attachments and the details of your account that are needed to answer, and drafts a reply. Replies drafted this way say that they were written with the help of AI. Anthropic does not use this data to train its models.
Location: United States – Refer to their Privacy Policy for details.
Slack (Salesforce, Inc.)
Internal notifications to our team, for example about sign-ups, payments and support requests. These can include your name, your email address and a summary of your request.
Location: United States – Refer to their Privacy Policy for details.
Backblaze, Inc.
Backups of our main database. They are encrypted on our servers before upload, so Backblaze stores only encrypted copies it cannot read. We keep them for 14 days.
Location: Netherlands (Amsterdam) – Refer to their Privacy Policy for details.
Adobe (Adobe Fonts)
The fonts of this website. Your browser loads them from Adobe’s servers, which receive your IP address and the address of the page. Adobe Fonts sets no cookies.
Location: United States – Refer to their Privacy Policy for details.
Sign-in with another account
If you sign in to the dashboard with Google, GitHub, GitLab or Microsoft, that provider tells us your name and email address. Their own privacy policies apply to what happens at the provider.
The free tools on this website send what you enter to our API through our Cloudflare Worker, which uses our own API key:
| Purpose | Legal basis |
|---|---|
| Your account, the API, the dashboard and payments | Performance of a contract (Art. 6(1)(b) GDPR) |
| Invoices and bookkeeping records | Legal obligation (Art. 6(1)(c) GDPR), Austrian tax law (§ 132 BAO) |
| Answering the contact form, support emails and AI-assisted drafting of replies | Steps before or performance of a contract (Art. 6(1)(b) GDPR); otherwise our legitimate interest in answering you quickly (Art. 6(1)(f) GDPR) |
| Analytics of this website and the dashboard, including session recordings in the dashboard | Our legitimate interest in understanding and improving our service (Art. 6(1)(f) GDPR) |
| Bot protection, rate limits, error tracking and security logs | Our legitimate interest in keeping the service secure and available (Art. 6(1)(f) GDPR) |
| Product news to customers | Our legitimate interest in direct marketing (Art. 6(1)(f) GDPR, § 174(4) TKG 2021); you can object at any time |
| Loading the fonts of this website from Adobe Fonts | Our legitimate interest in a consistent appearance of the website (Art. 6(1)(f) GDPR) |
Once the retention period ends, data is deleted and access/portability rights no longer apply.
Under the GDPR, users have the right to:
Users can also inquire about how data is protected when transferred abroad.
If we process data under public interest or legitimate interest, users may object by explaining their specific situation.
Users may always object to direct marketing use without giving a reason. If objected, data will no longer be used for that purpose.
To exercise these rights, users can contact the Owner using the contact details above. Requests are free and will be processed within a month.
If personal data has been shared with others, the Owner will attempt to notify them of any corrections or deletions, unless it’s impossible or overly difficult.
We may use personal data in legal proceedings or in preparation for legal action related to misuse of our Application or services.
Additional details about specific services or data handling may be provided on request.
For maintenance and operational purposes, we or third parties may log interactions and collect information such as IP addresses.
Users can request further details about data practices by contacting the Owner.
We may revise this privacy policy at any time. Users will be informed on this page or elsewhere in the Application. We may also notify users by email if possible.
Users should check this page regularly for updates. If consent is required for any changes, we will request it again as needed.
Unless otherwise mentioned, this privacy policy applies solely to this Application.