Privacy Policy
Last updated: Effective date:
CrawlerData (crawlerdata.com) is operated by Ecoprice Ltd, a company registered in Israel.
1. Who we are
1.1 CrawlerData is operated by Ecoprice Ltd, a company registered in Israel ("we", "us", "our"). This policy explains how we handle personal data in connection with our website (crawlerdata.com), our dashboard (app.crawlerdata.com) and our API (api.crawlerdata.com), together the "Service".
1.2 For privacy questions and requests, email contact@crawlerdata.com. We have not appointed a data protection officer.
1.3 Words such as "Queries", "Results" and "Customer Personal Data" have the meanings given in our Terms of Service.
2. Our role and yours
2.1 We are the controller of the personal data described in section 3: data about our customers, their users and visitors to our website. This policy applies to that data.
2.2 Our customers are the controllers of personal data contained in the Queries they send and in the Results we return, such as names, business details or images of people that appear in public search results. We process that data only on our customers' instructions, under the data processing terms in section 12 of our Terms. If you are an individual and want to make a request about data of this kind, please contact the customer that ran the search. If you contact us, we will forward your request to the customer where we can identify it.
2.3 Polar (Polar Software Inc.), which processes payments as our merchant of record, handles your payment details under its own privacy policy.
3. Personal data we collect
| Category | What it includes | Source |
|---|---|---|
| Account data | Name, email address, organization name, and your password, which we store only as a one-way hash and never in plain text. Whether your email address has been verified. | You |
| Verification data | Information you provide if we ask you to verify your identity, company or intended use of the Service, and the outcome of that check. | You |
| API keys | The API keys issued to your account and when they were created and used. | Generated by us |
| Usage data | For each request: the endpoint, the parameters and search queries you send, any webhook address, timestamps, status, credits used, and technical data such as IP address and user agent. | You and your devices |
| Job history | Your Queries and the Results we returned, shown in your dashboard. | You and the Service |
| Billing data | Packs bought, amounts, dates, credit balances and expiry, and the billing details Polar shares with us (such as your name, email, billing country and order reference). We do not receive your full card details. | Polar and the Service |
| Terms acceptance record | The date and time you accepted our Terms, the terms version, your IP address and your browser's user agent. | You and your device |
| Communications | Emails you send us and our replies, including support requests and abuse reports. | You |
| Website request data | When you visit our website, our hosting provider receives your IP address, browser user agent, the page requested and the time, as part of normal server logs. | Your browser |
3.1 You do not have to give us your personal data, but we need account and billing data to provide the Service.
4. How we use it and our legal bases
4.1 Where the GDPR or UK GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and running your account, authenticating you and your API keys, processing requests and showing your job history | Performance of our contract with you |
| Deducting credits, handling purchases and refunds through Polar, and keeping billing records | Performance of our contract; compliance with legal obligations (tax and accounting) |
| Sending service emails, such as email verification, password reset, purchase confirmations, credit expiry reminders and notices of changes to our terms | Performance of our contract; our legitimate interest in keeping you informed |
| Checking eligibility for trial credits, verifying customers, preventing fraud, abuse and multiple accounts, enforcing our Acceptable Use Policy, and keeping the Service secure | Our legitimate interests in protecting the Service, our customers and third parties |
| Responding to support requests and abuse reports | Performance of our contract; our legitimate interests |
| Recording your acceptance of our Terms | Our legitimate interest in being able to prove the contract |
| Monitoring performance and errors, and improving the Service using aggregated statistics | Our legitimate interest in operating and improving the Service |
| Complying with the law, responding to lawful requests from authorities, and establishing, exercising or defending legal claims | Compliance with legal obligations; our legitimate interests |
4.2 Automated checks. We use automated checks to decide whether a new account receives trial credits, for example whether the email domain belongs to a webmail or disposable email provider. If you disagree with the outcome, email us and a person will review it.
4.3 Marketing. We do not currently send marketing emails. If we start, we will do so only as the law allows, and every marketing email will let you unsubscribe. Service emails are not marketing and you cannot opt out of them while you have an account.
4.4 We do not sell your personal data.
5. Website, cookies and browser storage
5.1 Our marketing website does not use analytics, advertising or tracking cookies, and does not set any cookies of its own.
5.2 Fonts. Our website serves its typeface from our own servers. It does not load fonts or scripts from third-party services such as Google Fonts.
5.3 Dashboard. When you log in to the dashboard, it stores your login session token in your browser's local storage, so that you stay signed in. It may also store in session storage whether you dismissed a notice. This storage is strictly necessary for the dashboard to work and is not used for tracking. Logging out removes the session token.
6. Who we share it with
6.1 We share personal data only with the providers that help us run the Service, listed below, and only as needed for the purposes in section 4. They act on our instructions under contracts that require them to protect the data, except where noted.
| Provider | What they do | Location |
|---|---|---|
| Google Cloud (Google) | Hosting of the website, dashboard and API; database; server logs | EU (Belgium, europe-west1) |
| Polar Software Inc. (polar.sh) | Payments, tax, invoices and receipts, acting as merchant of record. For payment data Polar acts as an independent controller. | United States |
| Resend | Sending transactional emails, such as verification and password reset emails | EU region |
| Namecheap | Domain name services and forwarding of email sent to contact@crawlerdata.com | United States |
| Google (email) | The mailbox that receives email forwarded from contact@crawlerdata.com | May be outside the EEA |
| Network, proxy and CAPTCHA-solving providers | Helping us retrieve public search results. They see the search queries and parameters needed to fetch results, but not your account details. | Various countries |
6.2 We will update this list before we add or replace a provider that processes personal data. Customers will be notified of changes as described in our Terms.
6.3 We may also disclose personal data:
- to comply with the law, a court order or a lawful request from an authority, or to cooperate with law enforcement investigating misuse of the Service;
- where we believe in good faith it is needed to prevent fraud, abuse or harm, to protect the security of the Service, or to establish, exercise or defend legal claims;
- to professional advisers, such as lawyers and accountants, under a duty of confidentiality; and
- to a buyer or successor if all or part of our business is sold, merged or reorganized, in which case this policy will continue to protect your data.
7. International transfers
7.1 We store our database and run our servers in the European Union. We are based in Israel, which the European Commission recognizes as providing an adequate level of data protection, so personal data may be accessed from Israel.
7.2 Some of our providers may process personal data in other countries, including the United States. Where a country has no adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and, for the UK, the UK addendum to them, or on another lawful transfer mechanism. You can ask us for more information.
8. How long we keep it
| Data | Retention |
|---|---|
| Account data, verification data, API keys and communications | While your account is open, and up to 24 months after it is closed, for legal, tax and abuse-prevention purposes |
| Job history (Queries and Results) | Kept so that you can see your job history in the dashboard. We do not currently delete jobs automatically after a fixed period. You can ask us to delete your job history at any time, and we delete it within a reasonable period after your account is closed |
| Usage logs and website server logs | Up to 12 months |
| Billing records and terms acceptance records | As long as tax and accounting law requires, typically 7 years, or longer if needed for a legal claim |
8.1 We may keep data longer where the law requires it or where it is needed for an ongoing dispute or investigation. Deleted data may remain in backups for a limited time until they are overwritten.
9. Security
9.1 We protect personal data with measures appropriate to the risk, including:
- encryption of data in transit with TLS (HTTPS) on our website, dashboard and API;
- storing passwords only as one-way hashes;
- hosting on Google Cloud, with access to production systems limited to people who need it;
- rate limits on login and other sensitive actions, and monitoring for abuse; and
- leaving card payments to Polar, so that we never handle full card details.
9.2 No system is completely secure. Please keep your password and API keys safe, and tell us at contact@crawlerdata.com if you believe your account has been compromised. If a personal data breach affects you, we will notify you and the authorities as the law requires.
10. Your rights
10.1 If you are in the European Economic Area or the United Kingdom, under the GDPR or the UK GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- restrict how we use your data;
- receive your data in a structured, machine-readable format and have it transferred to another provider (portability);
- object to processing based on our legitimate interests, and to any direct marketing;
- withdraw consent at any time, where we rely on consent, without affecting processing that took place before; and
- complain to a data protection supervisory authority, in particular in the country where you live or work or where an alleged breach took place. In the UK this is the Information Commissioner's Office.
10.2 To use your rights, email contact@crawlerdata.com from the email address on your account, or tell us how to verify that the request is from you. We will reply within one month. Where a request is complex, we may extend this by up to two further months and will tell you why. Requests are free unless they are clearly unfounded or excessive.
10.3 Some rights are not absolute. For example, we may need to keep billing records to meet tax law even if you ask us to delete them. If we cannot meet a request, we will explain why.
10.4 We would welcome the chance to address any concern before you contact a supervisory authority.
11. Israel
11.1 We are subject to the Israeli Protection of Privacy Law, 5741-1981, and the regulations under it. Under that law, you may ask to review the personal data we hold about you, and ask us to correct or delete data that is inaccurate, incomplete, unclear or out of date. You may also complain to the Privacy Protection Authority at the Israeli Ministry of Justice.
12. California residents
12.1 This section applies to residents of California under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").
12.2 Categories we collected in the last 12 months:
- identifiers, such as name, email address, account identifiers and IP address;
- commercial information, such as credit packs bought and credit usage;
- internet or other network activity, such as API request logs, user agent and dashboard activity;
- professional information, such as your organization name; and
- sensitive personal information limited to account login credentials (your email address and password), which we use only to authenticate you and keep your account secure.
12.3 We collect this information from you, from your devices and from Polar, for the purposes described in section 4, and we keep it for the periods in section 8. We disclose it for business purposes to the service providers and contractors listed in section 6.
12.4 No selling or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the last 12 months. We do not use or disclose sensitive personal information for purposes that would give you a right to limit it under the CCPA. We have no actual knowledge of selling or sharing personal information of consumers under 16.
12.5 Your rights. You have the right to know what personal information we collect, use and disclose and to get a copy of it; to have it deleted; to have inaccurate information corrected; and to opt out of the sale or sharing of personal information (although we do not sell or share it).
12.6 How to make a request. Email contact@crawlerdata.com. We will verify your request by matching it to information we hold, usually by asking you to reply from the email address on your account. We will confirm receipt within 10 business days and respond within 45 days, which we may extend by a further 45 days when reasonably necessary, with notice to you.
12.7 Authorized agents. You may use an authorized agent to make a request for you. We may ask the agent for proof of your signed permission, and ask you to verify your identity directly with us, unless the agent holds a valid power of attorney.
12.8 Non-discrimination. We will not deny you the Service, charge you a different price or provide a different quality of service because you exercised your CCPA rights.
13. Children
13.1 The Service is for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has given us personal data, please contact us and we will delete it.
14. Changes to this policy
14.1 We may update this policy from time to time. The date at the top of the page shows when it was last changed. If we make a material change, we will notify account holders by email before it takes effect.
15. Contact
Ecoprice Ltd (CrawlerData). Email contact@crawlerdata.com for privacy questions and requests. See also our Terms of Service and Acceptable Use Policy.