Privacy and data processing information at IntelMind
This page explains how personal data related to the use of IntelMind and https://intelmind.io is collected, used and protected.
We recommend reading this document carefully to understand what data may be processed, for what purpose, what the applicable legal basis is, and what rights you can exercise.
1. Data controller
Controller: Rubén Jiménez Ormad
Tax ID (NIF/CIF): ***2324*C
Contact email: soporte@intelmind.io
Website: https://intelmind.io
2. What data may be processed
Depending on how you use the site and the platform, different categories of data may be processed.
- Identification and contact data: for example, name, email or other data you provide when registering or contacting us.
- Account data: information necessary for access, authentication and management of the user profile.
- Usage and browsing data: technical information, interactions with the site, basic access logs and activity within the platform.
- Data associated with lookups performed on IntelMind: information voluntarily entered by the user in order to use the tools available on the platform.
- Administrative and commercial data: information related to plans, credits, billing or support, when applicable.
3. Purposes of processing
Personal data may be processed for the following purposes:
Account management
Creating, maintaining and administering the user’s access to the platform, including authentication, security and profile management.
Service provision
Enabling the use of IntelMind, its tools, modules, features, credit consumption and operations associated with the service.
Support and assistance
Responding to queries, incidents, information requests, commercial requests or communications related to the service.
Improvement and security
Improving the operation of the platform, preventing misuse, strengthening security and maintaining the technical stability of the environment.
4. Legal basis for processing
The processing of personal data may be based, depending on the case, on one or more of the following legal grounds:
- Performance of a pre-contractual or contractual relationship: when processing is necessary to register you, manage your account or provide the requested service.
- Compliance with legal obligations: when there is an applicable regulatory obligation for the controller.
- Legitimate interest: for example, to maintain platform security, prevent fraud or improve the service, provided that such interest does not override your rights.
- Consent: when the regulations require it to be expressly obtained for a specific processing activity.
5. Retention period
Data will be retained for as long as necessary to fulfill the purpose for which it was collected and, where applicable, for as long as there is an active contractual or usage relationship with the user.
Once the relationship has ended or the purpose has been fulfilled, the data may be kept duly blocked for the periods required by applicable regulations, exclusively to address possible legal, contractual or administrative liabilities.
6. Recipients and data processors
As a general rule, data will not be disclosed to third parties except where legally required or when necessary for the proper provision of the service.
However, IntelMind may rely on technology, hosting, communications, analytics, support or infrastructure providers acting as data processors, who will only access the information necessary to provide their services under the controller’s instructions and with the corresponding contractual safeguards.
If you use services, integrations or features that depend on third parties, the processing may involve the technical intervention of such providers to the extent strictly necessary to carry out the requested feature.
7. International data transfers
If certain technology providers are located outside the European Economic Area or use infrastructure located outside that area, the processing may involve international data transfers.
When this occurs, the safeguards required by applicable regulations will be adopted, such as appropriate contractual clauses or other legally recognized mechanisms.
No international transfers are currently planned other than those that may be strictly required by the underlying technical infrastructure.
8. Rights of users
You can exercise your data protection rights at any time.
- Access: find out what data is being processed.
- Rectification: request the correction of inaccurate or incomplete data.
- Erasure: request the deletion of your data when applicable.
- Objection: object to certain processing activities in the legally provided cases.
- Restriction: request that processing be restricted in certain cases.
- Portability: receive your data in a structured format when applicable.
To exercise these rights you can write to soporte@intelmind.io, clearly stating your request and proving your identity when necessary.
Likewise, if you believe that a breach of data protection regulations has occurred, you can file a complaint with the competent supervisory authority.
9. Security measures
IntelMind adopts reasonable technical and organizational measures aimed at protecting the confidentiality, integrity, availability and security of personal data, taking into account the nature of the information processed and the associated risks.
However, no security measure on the internet can guarantee absolute protection, so users must also act diligently when using credentials, access and devices.
10. Minors
IntelMind is not specifically directed at minors. If applicable regulations require a minimum age to give consent for digital services, use of the platform must comply with that requirement.
If you find that personal data has been provided without the necessary authorization, you can contact the controller to request its review or deletion.
11. Cookies and similar technologies
The use of cookies and similar technologies is specifically regulated in the corresponding cookie policy, which details their purpose, operation and management.
12. Third-party advertising (Google AdSense)
Certain freely accessible pages of IntelMind —in particular the free phone number lookup service— may display advertising served by Google AdSense, Google’s advertising service. Google, as a third-party vendor, uses cookies and web beacons to serve and measure such ads.
Google uses cookies to serve ads based on a user’s prior visits to this and other websites, which may include personalized advertising based on their interests or browsing history.
Users can opt out of personalized advertising from Google at https://www.google.com/settings/ads, and can review how Google uses cookies and information in advertising at https://policies.google.com/technologies/ads and Google’s privacy policy. Details on the use of advertising cookies are set out in the cookie policy.
13. Changes to this policy
This privacy policy may be updated at any time to adapt to regulatory, technical, operational or platform changes.
In the event of a material change, the updated version will be published on this same page along with its corresponding revision date.
Last updated: 17/04/2026
Anonymous phone number lookups (public service, no registration required)
In the «Who is calling me from this number?» tool at /en/phone-lookup/ we allow any visitor to look up a number without registering. This section transparently explains what data is recorded, for how long, and on what legal basis.
- Phone number looked up: in international E.164 format.
- Analysis result: as technical JSON, with correlations from freely accessible public sources.
- Visitor’s IP address: IPv4 or IPv6.
- Date and time (UTC) of the lookup.
- Buyer’s email: ONLY if you voluntarily choose to access the full report ($3.99) and enter your email in the form.
- WooCommerce order identifier and payment date if the purchase is completed.
What we do NOT record
- Full name, ID number or postal address: the flow is anonymous and checkout is simplified so that only an email is requested.
- Full banking details: the WooPayments gateway handles the charge; we only receive the confirmation.
- Data auto-filled from the card: if WooPayments automatically fills in name/address, we delete it instantly, keeping only your email in order to deliver the product.
Legal basis for processing
- Anonymous lookups (IP + number + result): GDPR Art. 6.1.f — legitimate interest in (i) preventing abuse of the free service, (ii) improving the quality of the OSINT analysis, (iii) detecting recurring phone fraud campaigns.
- Buyer’s email and payment: GDPR Art. 6.1.b — performance of a contract (delivery of the paid report).
- Subsequent commercial communications: Art. 6.1.a — consent. Only if you expressly request it or following a first purchase, under Art. 21.2 of the Spanish LSSI.
Retention period
- Unpaid anonymous lookups: 30 calendar days. After that period, the IP, number, optional email and result are automatically deleted via a daily scheduled task.
- Purchases ($3.99): the report remains accessible via its unique URL for 30 days from payment. After that period it is deleted. Invoices are kept in accordance with the Spanish General Tax Law (4 years).
- RFC 3161 digital custody seal: it is deleted together with the report after 30 days. Keep the downloaded PDF if you need to retain the seal.
Nature of the data provided
- NOT an official identification: IntelMind does not officially identify the owner of the number. The actual ownership is commercial data protected by the carrier and is only accessible through a judicial order.
- Indications and correlations only: obtained from freely accessible public sources — social media, published breaches, business registries (BORME), public phone directories (listaspam, Tellows, SpamCalls, responderono), sanctions lists (OFAC) and standard technical checks.
- Potentially outdated data: the names shown may correspond to the current owner, a previous owner (numbers are recycled) or a person with the same name. We label confidence as HIGH / MEDIUM / LOW.
Lawful use by the requester
- Permitted: defending yourself against a suspicious call/SMS, pre-contractual due diligence, investigative journalism, legitimate investigation with a legal basis, or defensive reverse doxxing.
- Not permitted: harassment, identity theft, discrimination, stalking, systematic mass data collection, or violating third parties’ privacy without a legal basis.
- Responsibility: use of the report is the sole responsibility of the requester.
Your rights (GDPR + Spanish LOPDGDD)
- Access: know what information we hold associated with your number or email.
- Rectification: correct inaccurate data.
- Erasure (right to be forgotten): request immediate deletion.
- Objection: object to processing for reasons related to your particular situation.
- Restriction: request that we temporarily stop processing.
- Portability: receive your data in structured JSON format.
- How to exercise them: write to soporte@intelmind.io with a copy of your ID document, or use the self-service portal at /en/my-data/.
- Complaints: to the Spanish Data Protection Agency (AEPD) at aepd.es, or to your own country’s data protection authority.
Disclosures to third parties
- WooPayments (Stripe): processes the payment. Data disclosed: email and card (tokenized — we never see it).
- Google (Gmail SMTP): sends the transactional email with the link to the report.
- FreeTSA (RFC 3161): issues the timestamp. Only the SHA-256 hash of the report is sent — never data in plain text.
- OpenAI (gpt-5.4): drafts the executive summary. Anonymized technical report data is sent — without the number in a lookup-ready format or the customer’s email.
- No additional third party accesses your data. We do not sell lists or profile behavior.
Have questions about privacy?
If you need clarification about data processing or any point of this policy, you can write to us and we will review your request.