Tietosuojakäytäntö

1. Data controller

• Controller: Byteguard Sociedad Limitada
• Tax ID (CIF): ESB19417872
• Address: Laguna 8A, 06460 Badajoz, Spain
• Website: nocall.io
• Email: [email protected]

This policy applies to the nocall.io website, the NoCall iOS app, and related services: number search, reports, comments, call blocking, SMS filtering, notifications, API, support, statistics, and informational pages.

2. Data we process

On the website

• Searches: phone number or company name entered to show results and prevent abuse.
• Reports and comments: reported number, category, comment, display name chosen by the user, and minimal technical metadata.
• Technical data: IP address, user agent, language, requested path, date, request status, and security signals.
• Support: messages sent by email or via the support widget, together with data needed to respond.

In the NoCall iOS app

• Device identifier: random identifier to limit duplicates and maintain service state.
• Submitted reports: numbers, categories, optional comments, and security markers you choose to send.
• Searches: number or company queries from the app to return risk information.
• Purchases: Apple transaction identifiers to validate Premium features. We do not receive card data.
• Push notifications: notification token if you enable them.

Call blocking integrates with iOS capabilities and SMS filtering runs on the device. NoCall does not need to upload the content of your SMS or your contacts to provide these features.

3. Third-party services

• Google AdSense: shows ads on the site and may use cookies or advertising identifiers depending on browser and Google settings.
• Google Analytics: measures aggregated site usage to understand performance, pages visited, and product issues.
• Microsoft Clarity: helps analyse user experience, visual errors, and aggregated behaviour on the web.
• Intercom: provides the support widget and messaging when available.
• ByteGuard: verifies that requests come from legitimate users and helps block bots, abuse, and automated scraping.
• Cloudflare: CDN, security, caching, network protection and, when Turnstile is used in invisible mode, anti-bot verification subject to Cloudflare's Turnstile Privacy Addendum.
• Apple: processes app downloads, purchases, and refunds on the App Store.

These providers act under their own privacy policies and may process technical data outside the European Economic Area with applicable contractual safeguards.

You can review categories and change your choices in the Cookie Policy or from the footer preferences link.

4. Purposes of processing

• Show search results for numbers, companies, prefixes, and operators in Spain.
• Maintain a community database of numbers reported as spam, scam, telemarketing, or other categories.
• Block calls and filter suspicious SMS from the app.
• Moderate reports and comments, including manual or AI-assisted review.
• Prevent abuse, bots, scraping, spam, fraud, and malicious use of the service.
• Measure performance, fix errors, improve design, and publish aggregated statistics.
• Show ads and keep the free plan available to users.
• Validate Premium purchases, send notifications if you enable them, and respond to support requests.

5. Legal basis

• Consent: comments, reports, push notifications, and certain cookies or similar technologies where applicable.
• Contract performance: providing the service, validating purchases, and app features.
• Legitimate interests: security, abuse prevention, basic metrics, service improvement, and maintaining the community database.
• Legal obligation: retaining information required for tax, accounting, or legal requirements.

6. Publication of community content

Reports and comments sent to NoCall may appear publicly on number pages, statistics, listings, or related results. Do not post sensitive data, third parties’ private information, or accusations you cannot substantiate.

7. Retention

• Reports and comments: kept while useful for the community database or until removal is appropriate.
• Technical data and logs: kept as long as needed for security, debugging, and abuse prevention.
• Anti-bot data: processed to verify requests and may generate temporary security tokens or events.
• Purchases: for the period needed to validate Premium and meet legal obligations.
• Support: as long as needed to respond and maintain a reasonable incident history.
• Advertising and analytics: according to applied settings and Google, Microsoft, and Intercom policies.

8. Your rights

You can exercise access, rectification, erasure, objection, restriction, and portability by writing to [email protected]. To help us locate data, include the number, comment, email, or identifier related to your request.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

9. Security

• HTTPS/TLS for communications.
• Anti-bot measures, rate limiting, and abuse controls.
• Restricted access to internal systems.
• Content moderation and report review to reduce false positives.

10. Minors

NoCall is not directed at children under 16. If you believe a child has sent us personal data, contact us so we can review it.

11. Changes

We may update this policy to reflect changes to the site, app, providers, ads, features, or legal requirements. The date at the top shows the last update.

12. Contact

For privacy, data protection, or content removal, write to [email protected].