Privacy Policy

Last updated: February 20, 2026

BotScore ("we", "us", "our") is operated by ZEAM Labs. This policy explains what data we collect and how we use it.

1. Data We Collect

Account data: When you sign up, we collect your email address. If you purchase a paid plan, Stripe collects your payment information — we never see or store your full card number.

API request data: When you call our API, you send us IP addresses and user agent strings for analysis. We process these to return bot detection scores.

Server logs: We log standard HTTP request metadata (your IP, timestamps, request paths) for security and debugging. These logs are retained for up to 30 days.

2. How We Use Your Data

To provide the BotScore API service
To enforce rate limits and prevent abuse
To improve our bot detection accuracy (aggregated, non-personal signal data)
To communicate about your account (key delivery, service issues)

3. Data We Do NOT Collect

We do not use cookies or tracking scripts on our website
We do not use analytics services (no Google Analytics, no pixels)
We do not sell, rent, or share personal data with third parties
We do not store the IP addresses or user agents you submit for analysis beyond the current request, except in aggregated reputation data

4. IP Reputation Data

Our API builds an aggregated reputation score for IP addresses based on patterns observed across all API queries. This data is statistical (request counts, bot score averages) and does not contain personally identifiable information.

5. Third-Party Services

Stripe — payment processing. See Stripe's privacy policy.
RapidAPI — API marketplace distribution (optional). See RapidAPI's privacy policy.
MaxMind GeoLite2 — IP geolocation lookups performed locally on our server. No data is sent to MaxMind.

6. Data Retention

Account data: retained while your account is active
API usage logs: 90 days
Server access logs: 30 days
IP reputation data: indefinite (aggregated, non-personal)

7. Data Security

API keys are stored as SHA-256 hashes. All traffic is encrypted via TLS. Our servers are hosted in the EU (Hetzner, Germany).

8. Your Rights

You can request deletion of your account and associated data by emailing support@getbotscore.com. We will process requests within 30 days.

9. Changes

We may update this policy. Material changes will be noted on this page with an updated date.

10. Contact

Questions? Email support@getbotscore.com.