Privacy Policy

Effective Date: August 10, 2025

Who We Are

BlitzAPI / SA Blitz Group
SIREN: 943073247
Registered Address: 3 rue du Coq Enchaîné, 14600 La Rivière-Saint-Sauveur, France
Email: antoine@blitz-agency.com

SA Blitz Group acts as:

  • Data Controller for website usage, account creation, payments, support, and analytics.

  • Data Processor when executing API operations on behalf of customers.

Scope of this Policy

This Privacy Policy applies to:

  • The BlitzAPI website (blitz-api.ai)

  • All BlitzAPI endpoints (Search, Enrichment, Validation, Scraping)

  • Customer accounts, billing, logs, and API usage data

  • Support and customer success interactions

It does not apply to:

  • Data processed by the user outside BlitzAPI

  • Customer CRM or third-party platforms connected to BlitzAPI

Data We Collect

BlitzAPI processes B2B-only data.
We do not process B2C data, personal emails, or consumer profiles.


Website Data

We may collect:

  • Identifiers (IP address, browser, device)

  • Cookies and analytics data (Google Analytics 4)

  • Contact form entries

  • Account creation information (email, password hash, billing info)


API Usage Data

When you call BlitzAPI endpoints, we may process:

B2B Contact Data

  • Professional emails

  • Professional phone numbers

  • Professional LinkedIn URLs

  • Job titles, company information

Company Data

  • Domain names

  • Company LinkedIn pages

  • Sector, size, location

Technical Logs

  • Timestamp

  • IP address

  • Endpoint used

  • Error logs

These logs are stored 30 days for security and operational integrity.

Data We Do NOT Collect

BlitzAPI explicitly does not accept, process, or store:

  • Personal / consumer data

  • Personal emails (gmail, yahoo, protonmail, etc.)

  • Sensitive categories (health, religion, political opinions…)

  • Private or non-public information

  • Any data scraped or collected in violation of third-party Terms of Service

If such data is submitted by mistake, it is automatically rejected or deleted.

How We Use the Data

We process data exclusively for:

Service Delivery (Contractual Necessity)

  • Executing API calls

  • Returning search, enrichment or validation results

  • Securing the service

  • Managing accounts and billing

Legitimate Interest (B2B)

  • Improving API performance

  • Preventing abuse or fraud

  • Providing support and customer success

  • Internal analytics and service optimization

Consent

  • Cookie-based analytics (Google Analytics 4)

  • Optional marketing communications

No Resale, No Redistribution, No Platform Development

BlitzAPI does not resell data, datasets, or enrichments, nor do we allow customers to do so.

You are not permitted to:

  • Use BlitzAPI to build a competing database, data platform, or public dataset

  • Redistribute enriched or validated data to third parties or downstream platforms

  • Build an automated enrichment engine integrated into a commercial SaaS

  • Repurpose data for non-B2B targeting or consumer tracking

BlitzAPI is intended for direct use by businesses, not for use inside third-party data products or marketplaces.

Third Parties & Subprocessors

No Personal Data Shared with Third Parties

BlitzAPI does not transmit any personal data (emails, phones, LinkedIn URLs, company details, etc.) to any third-party services when executing API calls.

All API operations are processed on BlitzAPI-controlled servers.

International Transfers

The BlitzAPI infrastructure operates in the European Union.
Some tools (Stripe, AWS) may involve transfers to the United States under:

  • Standard Contractual Clauses (SCCs)

  • Appropriate safeguards under GDPR

No API personal data is transferred outside the EU.

Data Security

We implement industry-standard measures, including:

  • Encryption in transit (HTTPS/TLS 1.2+)

  • Network segregation

  • Access-control and least-privilege internal policies

  • Regular auditing and monitoring

  • Encrypted storage within Hetzner EU data centers

No raw API personal data is transmitted to any third-party provider.

User Rights (GDPR)

You have the right to:

  • Access your personal data

  • Rectify inaccurate information

  • Request deletion

  • Object to processing

  • Restrict processing

  • Export your data (data portability)

Requests can be sent to: antoine@blitz-agency.com

We will respond within 30 days.

Cookies

BlitzAPI uses:

  • Essential cookies (authentication, session)

  • Analytics cookies (Google Analytics 4)

Non-essential cookies require consent via the cookie banner.

Customer Responsibilities

Users of BlitzAPI must:

  • Use the API only for lawful B2B purposes

  • Not submit consumer data

  • Not violate any third-party platform ToS, including LinkedIn’s Terms of Service

  • Not attempt to scrape private or restricted resources

  • Not build datasets, products, or enrichment platforms using BlitzAPI outputs

BlitzAPI reserves the right to suspend accounts violating these principles.

Enterprise-grade targeting & enrichment at a scraping cost

Real-time Data

Cost effective

Charge per result

Enterprise-grade targeting & enrichment at a scraping cost

Real-time Data

Cost effective

Charge per result

Enterprise-grade targeting & enrichment at a scraping cost

Real-time Data

Cost effective

Charge per result