Privacy Policy

• Personal Data: any information relating to an identified or identifiable natural person.
• Services: all websites, applications, APIs, and related products or services offered by IMEILookup.
• User: any individual or entity using the Services.

IMEILookup is operated by:
Code Eleven, a sole proprietorship based in India (Primary Controller)
H2 Copperstone, Dumas Road, Surat, Gujarat, India 394550

Together with its affiliated company:
K11 Technologies LLC FZ (Affiliate Entity)
6th Floor, Meydan Grandstand, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates

Code Eleven acts as the primary global controller of personal data. K11 Technologies LLC FZ operates as an affiliated entity and may process payments or provide services globally where payment gateways or infrastructure are registered under this entity.

All privacy-related inquiries may be directed to: support@imeilookup.com.

We only collect the minimum personal data necessary to operate the Services, fulfill orders, ensure security, and comply with legal obligations. We collect the following categories of information:

• Registration Data: name, username, email address, phone number, business name, country, and IP address.
• Order Data: device identifiers such as IMEI, MEID, or Serial Number (SN), together with order results and associated IP address.
• Free Check Data: email address, browser information, and IP address.
• API Usage Data: API keys, request logs, timestamps, and IP addresses.
• Telegram Bot Data: Telegram ID, username, and any information you submit via the official IMEILookup Telegram bot.
• Communication Data: information you provide when contacting us via email or other official support channels, including subscription to newsletters and marketing communications.
• Invoice and Payment Data: invoices (paid or unpaid), transaction references, and payment status. We do not store or collect full payment card or wallet details.
• Login and Security Logs: records of login attempts, including timestamps, IP addresses, device/browser information, and account identifiers, which are maintained for security, fraud prevention, and troubleshooting.
• Third-Party Login Data: If you choose to register or sign in using Google Sign-In, we receive your basic profile information (such as name, email address, and Google Account ID) from Google.

• To provide, operate, and maintain the Services.
• To process orders and deliver requested reports.
• To authenticate users and secure accounts.
• To process payments, issue invoices, and manage billing.
• To detect, prevent, and investigate fraud, misuse, or unauthorized activity.
• To comply with applicable legal obligations.
• To analyze usage trends and improve system performance and accuracy.
• To communicate with users regarding their accounts, services, or promotional materials (only where users have opted in, with the ability to unsubscribe at any time).

We use cookies and similar technologies to ensure security, maintain service functionality, and improve user experience. These may include:

• Essential Cookies: used for site security and performance (e.g., Cloudflare).
• Analytics Cookies: used to understand how the Services are accessed and used (e.g., Google Analytics). Analytics cookies may assign a unique identifier to your browser or device.

Users may manage or disable cookies via browser settings. Where required by law, non-essential cookies will only be used with user consent.

We also use Google reCAPTCHA to protect our website from spam and abuse. reCAPTCHA analyzes user interactions to verify whether requests are made by humans. This data is collected directly by Google and is subject to Google's Privacy Policy and Terms of Service.

Payments may be processed by:
- Code Eleven for gateways such as Stripe and CoinGate.

We do not store payment card or cryptocurrency wallet details. All payment information is provided directly to our payment processors, who handle it in accordance with their own privacy policies.

• Account Data: retained for as long as the account is active or required for legal or business purposes.
• IMEI/Order Logs: retained actively for six (6) months, then archived indefinitely.
• Invoices and Financial Records: retained for at least five (5) years in compliance with accounting and legal requirements.

When a user requests deletion, personal data is deleted or anonymized within sixty (60) days. Order data is retained in archived form but is no longer associated with the user's account.

• Consent: for marketing communications and non-essential cookies.
• Contractual necessity: to deliver services ordered through IMEILookup.
• Legal obligations: to maintain tax, accounting, and compliance records.
• Legitimate interests: including fraud prevention, service improvement, and maintaining archived IMEI/order data.

• Service Providers: hosting, analytics, security/CDN providers.
• Payment Processors: Stripe, CoinGate, or others registered under Code Eleven or K11 Technologies LLC FZ.
• Email Service Providers: for newsletters and communications.
• Third-Party Processors: for generating order results.
• Legal Authorities: when required by law.

We do not sell, rent, or trade personal data. Google reCAPTCHA and Google Sign-In act as independent controllers where applicable.

Personal information may be transferred to and processed in countries outside your residence, including the US. For transfers from the EEA/UK, we rely on approved mechanisms such as the EU-US Data Privacy Framework or Standard Contractual Clauses to ensure protection.

• HTTPS/TLS encryption for data in transit.
• Strict access controls restricting data access to authorized personnel only.
• Regular backups and monitoring.
• Firewall and DDoS protection, including Cloudflare.

While we strive to use industry-standard methods to protect your information, no system can guarantee absolute security.

• Access: request a copy of your personal data.
• Correction: request updates to inaccurate or incomplete data.
• Deletion: request deletion within 60 days.
• Portability: request order history in structured format.
• Objection/Restriction: object to or limit processing.
• Withdraw Consent: opt out of marketing communications at any time.

Requests may be made by contacting support@imeilookup.com.

We offer Google Sign-In. We receive limited account information to verify your identity but do not access your password or private Google information.

The Services are not directed to individuals under 16 or minimum age required by law. We do not knowingly collect personal data from children. If discovered, such data will be deleted promptly.

We may update this Privacy Policy from time to time. The 'Last Updated' date will be revised. Material changes will be communicated via email or notice on our website.

This Privacy Policy is governed by the laws of India. Disputes are subject to the exclusive jurisdiction of the courts of Surat, Gujarat, India. We also comply with GDPR for EU/UK users and CCPA for California users.