1. Information We Collect

AddressValid provides spatial dataset geocoding, autocomplete lookup interfaces, and building validation Services. When you use our platform, we collect:

• Account Information: Organization names, developer emails, billing credentials, and contact details.
• API Query Data: Address text strings, landmark descriptions, and geocoded coordinates submitted to standard API endpoints.
• Usage Analytics: IP addresses, browser agents, request timestamps, error codes, and billing token consumption rates.

2. How We Use Information

We collect address inputs and geocoding queries solely to execute real-time address validation requests. Specifically:

• To resolve written descriptions into GPS coordinates.
• To analyze autocomplete typos and improve search ranking models.
• To track billing metrics and quota usage across developer keys.
• To monitor API latency, performance anomalies, and security events.

We do NOT build user profiles, sell customer coordinates data to ad networks, or share queries with unauthorized third parties.

3. Data Retention & Privacy

We retain API logs containing raw address string inputs for 30 days to assist developers with debugging, error tracing, and usage auditing. After 30 days, query texts are scrubbed or anonymized.

Stored GIS database coordinates, administrative boundary geometries, and point-of-interest markers represent general geographical facts and do not contain personal identifier records.

4. Security Measures

We implement industry-standard encryption protocols (TLS/HTTPS in transit and AES-256 at rest) to secure coordinate payloads, keys, and account logs. Access to operational database clusters is protected by role-based permissions (RBAC) and restricted subnets.

5. Regulatory Compliance

For fintech and logistics clients subject to NDPR (Nigeria Data Protection Regulation) or GDPR guidelines, AddressValid functions as a data processor. We maintain data processing agreements (DPA) containing compliance telemetry parameters.