Privacy Policy
How we handle your data at Crawlens.
Definitions
When we say “we”, “us”, or “our”, we’re referring to Crawlens. “Customer” refers to any entity that has an agreement to use our Services. “Personal Information” refers to any information which may identify an individual personally. “Visitor” refers to anyone accessing our Site.
Information Collected from Visitors
We collect the pages you visit on this site and the links you click, your browser and device information, and your IP address. Analytics runs only after you accept it, and you can change that choice at any time. We do not collect mouse movements, keystrokes or anything else about how you move on the page.
Information Collected from Customers
For a paying Customer we store: your account details (name, email, the organizations you belong to); the sites you add to monitor, and for each site the screenshots, the rendered page HTML, the text extracted from it and the technical signals measured on every scan; the AI-written interpretation of a change, the importance rating given to it and the feedback you leave on it; your decisions about a change (accepted, ignored, reopened); and the payment provider's customer and subscription references. We never see or store your card number. A generated interpretation is stored against the change it describes and never changes the alert, its severity or the evidence behind it.
Data Storage and Location
We keep your account data and monitoring evidence — screenshots, page HTML, extracted text and the technical signals measured on each crawl — **for as long as your plan entitles you to**: Free 7 days, Pro 90 days, Agency plans 180 days. When the window closes the record and its files are permanently deleted. If we cannot resolve which plan you were on we apply the longest window, 180 days: never the shortest, because the irreversible mistake is deleting the expensive one. Deleting your account deletes your data immediately. Our servers and your evidence files are operated in **a single provider's facility** — screenshots are written to storage on our own server, not to a separate cloud service. The exact region is named in your order form; we will write it down and tell you before it changes if you ask for your region and provider. Data is encrypted in transit and at rest, and access is limited to the people who operate the service.
Third Parties and Disclosure
We never sell your data. The service depends on these processors, each bound by contract to act only on our instructions: payment processing and invoicing (our Merchant of Record, which issues the invoice and remits the tax); infrastructure hosting; object storage for screenshots and HTML; email delivery; a generative AI provider, used only when AI analysis is switched on for your organization and only with the parts of a page your organization chose to monitor; and product analytics, which runs only with your consent. The current list, with the region each one operates in, is published in our subprocessor register, and we provide a data processing agreement on request.
Rights of the Subject Person
You can download everything we hold about you from Settings, using "Download my data", and delete your account from the same place. Both take effect immediately; if you are the last owner of an organization, its data is removed with the account, and if someone else can still administer it, it is left untouched. You can also write to us to access, correct, restrict or object to processing, to port your data, or to complain to a supervisory authority. Under Turkish KVKK you have the same rights, including the right to lodge an application with the relevant authority.
Turkish data protection law (KVKK)
If you are in Türkiye, the Law on Protection of Personal Data (KVKK, No. 6698) applies to us as the data controller for your account data and as the data processor for the content of the pages you monitor. As controller we keep your account, billing and support records for the periods stated in this policy. As processor we process the content of a monitored page only on your instruction, for the purpose of producing the capture, the evidence and the interpretation, and we do not use it for our own purposes. You have the right to request access to and correction of your personal data, to request deletion or restriction, to object to processing that is not based on your consent or a contract, and to lodge an application with the supervisory authority. Access and deletion are also available to you directly from Settings, without writing to us. We do not sell personal data and we do not share it with third parties outside the sub-processors listed on our GDPR page.
Security Measures
We implement industry-standard security measures, including SSL encryption, to protect against unauthorized access, use, or alteration of data. However, no security measures are perfect, and we cannot guarantee absolute security.
Children
Our Site and Services are intended for a general audience. We do not knowingly collect Personal Information from anyone under the age of 13.
Contact Us
If you have any questions or concerns regarding your privacy when using Crawlens, please contact us at [email protected].