iqanywhere privacy statement
Version 21 October 2026
Who is responsible
Iqsoftware, a sole proprietorship, KvK 78400732, Lissabonpromenade 15, 3541 DP Utrecht, Netherlands, is responsible for iqanywhere's own account, payment, support and security administration. Contact: support@iqsoftware.nl. When a business customer uses iqanywhere for personal data on a computer, we process transport and access data on their behalf; see the data processing agreement. The helper or their organisation determines which data they use during the session.
Which data and why
Without an account, iqanywhere processes a device/helper identity, chosen computer name, technical agent and operating system information, online status, IP address, usage time, access permissions and connection events. This is needed to find computers, protect access, determine the free daily allowance and investigate faults or misuse. Legal basis: performance of the service and our legitimate interest in providing a secure, affordable service. A connection cannot be provided without these technical data.
For an account, we process the name, email address, verification status, protected password data, sign-in details and licence status. When 2FA is enabled, we process the necessary authentication factor and recovery data. This is needed for the agreement and account security. Stripe processes the name, billing address, payment details, VAT and invoices. iqanywhere receives payment and subscription references and status; full payment card details are not stored in the iqanywhere app or our own licensing database. Statutory financial records are retained on the basis of a legal obligation.
For invitations, we process the supplied email address for delivery, the known sender's name and contact details, a protected invitation, status and the linked receiving computer. The address may have been supplied by the person inviting you. An open invitation remains valid until revoked or completed and is limited to one computer. The first connection asks for consent. Abuse prevention uses protected characteristics of sending requests.
For support, we process your contact details, question and the information you choose to send in order to respond, perform the agreement and investigate problems. Send only what is necessary.
Screen, input and local storage
An authorised helper can see your screen, operate the mouse and keyboard and transfer supported clipboard content. Close confidential information not intended for them. iqanywhere does not record screen sessions by default and does not retain screen images as part of the ordinary service. Traffic uses encrypted connections; this is not a general guarantee that content is technically invisible to the server administrator. Administrators receive access only for necessary administration, support, security or a legal obligation.
The app stores information on your computer including saved computers, local names, last connection times, settings and necessary access keys. Removing a computer entry in Connect does not automatically revoke previously granted permission at the recipient; revoke it through Receive. Necessary session cookies are used for sign-in. The download website contains no advertising trackers or our own marketing analytics. Our infrastructure providers do process network and security data. We do not sell personal data or use automated decision-making with legal or similarly significant effects; ordinary access and daily allowance checks are part of the service.
Who receives data
Our own iqanywhere and mail servers handle connections, invitations and account emails. OVHcloud provides server infrastructure. Cloudflare provides the download website, DNS and web security. Stripe handles payments, tax calculation and invoicing, partly as an independent controller. Apple and Microsoft check signatures and security when you use their platform services. An invitation recipient and the helper you authorise receive the data necessary for that action. We otherwise disclose data only when needed for the service, legal obligations or legal protection.
Cloudflare and Stripe are international service providers and may process data outside the European Economic Area. They publish their privacy terms and transfer safeguards, including applicable adequacy decisions and European standard contractual clauses. You can contact support for information about the safeguards used for your data. We do not claim that all data remain exclusively in the Netherlands. See cloudflare.com/privacypolicy, stripe.com/nl/privacy and the data processing agreement for roles and subprocessors.
How long we retain data
Account data and active device/access data are retained for as long as they are needed for your service. Unused ongoing permission or an invitation that has not been revoked does not expire automatically. You can revoke access yourself and ask support for deletion or export. Closed invitations are deleted during cleanup after 35 days. Temporary sending records are cleaned up after no more than 35 days. Daily usage is recorded per identity; the current daily record is replaced when used. Some technical device and event data remain until the device or account is deleted under the deletion procedure; we assess the necessity when a deletion request is received and periodically during administration.
We generally retain financial records, including invoices and necessary evidence of purchases and cancellations, for seven years to meet statutory record-keeping requirements. We retain support cases for as long as necessary for handling and any follow-up or disputes; the reason for retention is recorded when a case is closed. Technical logs rotate based on file size; they do not all have a fixed retention period in days. We restrict access and do not use these records for marketing.
Encrypted recovery backups also contain personal data. The independent copy retains the last fourteen distinct snapshots; if backups have stopped, this does not necessarily mean fourteen days. Deleted data may remain in these temporarily. On recovery, we reapply recorded deletions before the service becomes public again. Retention may need to be longer because of a specific legal obligation or a dispute; in that case, we limit the data to that purpose.
Your rights and security
You can request access, a copy, correction, deletion, restriction or, where applicable, portability. You can object to processing based on legitimate interests. Contact support@iqsoftware.nl; we verify your identity proportionately, do not routinely request identity documents and generally respond within one month. For a complex request, we explain promptly why more time is needed. You can always revoke access at the recipient; optional 2FA can be managed in your account. Necessary financial retention requirements mean that we cannot immediately erase every item of data. You can lodge a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.
We use restricted access rights, signed apps, encrypted transport and backups, logging, and update and recovery checks. No system is risk-free. If you suspect a data breach or unauthorised access, disconnect the session, revoke access and report it directly to support. For important changes, we inform users through the website and, where necessary, by email.
Trial week
We store the start and end dates of the trial week with your account. A hashed version of the verified email address prevents deleting and recreating an account from providing a new trial week. This record is retained for that purpose for no more than two years after the trial ends.