Privacy policy

crawlseo.cloud is operated by Hafin Mykhailo Yuriiovych, Individual Entrepreneur (FOP), Ukraine ("we", "us", "our").

This Privacy Policy explains what we collect, why, how long we keep it and who processes it for us, when you visit crawlseo.cloud, join the waitlist, or use the crawlseo cloud service (together, "the Service"). The open-source version of crawlseo that you run on your own server is not covered here: when you self-host, we receive no data from your installation.

To reach us about anything in this policy, use the contact page at https://crawlseo.cloud/contact.

What we collect

Waitlist. When you join the waitlist we store your email address, the website you entered, the time you signed up, your consent to be contacted about your invite, and, if you arrived through a campaign link, its campaign tags.

Website visits. Our hosting provider keeps standard server logs (IP address, browser, requested page, time, referring page) for security and troubleshooting. We count page views with Vercel Web Analytics, which sets no cookies and does not identify individual visitors.

Account (once you are invited). You sign in with Google. We receive your name, email address and profile picture. We never see your Google password.

Google Search Console data. When you connect Search Console, we read, with read-only access, the data for the properties you choose: search queries, pages, clicks, impressions, positions and indexing status. We use it to show your SEO dashboard and to suggest the questions we ask AI assistants about your site.

Your site. We crawl the public pages of sites you have verified in Search Console, the same way a search engine does, to check technical SEO and how your pages can be read.

AI answers. To measure how AI assistants describe your site, we send questions (prompts) to the AI providers listed below. A prompt contains the question text and may contain your brand name or site address. We store the full answers, the sources they cite and the measurements we derive from them.

Payments. Payments are handled by Creem, our merchant of record. Creem collects and processes your card details; we receive only the subscription status, plan and invoice records.

We do not collect sensitive categories of personal data, and we do not use your data for advertising.

Google user data

crawlseo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Search Console data only to provide and improve the features you see in crawlseo: your SEO dashboard, alerts, and the prompts we suggest for AI answer tracking.
• We transfer it to third parties only when needed for those features (for example, a search query from your Search Console data may become part of a prompt sent to an AI provider), for security, or to comply with the law.
• We do not use it for advertising, we do not sell it, and we do not use it to train AI models.
• No person at crawlseo reads your Search Console data unless you ask us to for support, it is needed for security, or the law requires it.

You can disconnect Google at any time in your account settings or at https://myaccount.google.com/permissions.

Why we process it (legal basis under GDPR)

• Contract: running your account, Search Console sync, crawls, AI answer tracking, billing.
• Legitimate interest: keeping the Service secure, preventing abuse, fixing errors and understanding which pages of the site are useful, in aggregate.
• Consent: contacting you about your waitlist invite. You can withdraw consent at any time.

We do not make automated decisions about you that have legal or similarly significant effects.

How long we keep it

• Waitlist entries: until you get an invite and create an account, or for 12 months, whichever comes first. You can ask us to delete your entry at any time.
• Account data and history: while your account is active. After you cancel, your dashboard is locked and your data is kept for 60 days so you can come back, then deleted.
• Server logs: up to 90 days.
• Payment records: as long as tax and accounting law requires.

Who processes data for us

• Vercel Inc. hosts the website and the application. Server-side processing runs in the United States.
• Neon, LLC hosts the database (EU region, Frankfurt).
• Google LLC provides sign-in, the Search Console API and the Gemini API.
• OpenAI, L.L.C. answers prompts (ChatGPT).
• Perplexity AI, Inc. answers prompts.
• Creem (Armitage Labs OÜ, Estonia) processes payments as merchant of record.

The current list is always on https://crawlseo.cloud/legal/subprocessors.

Some of these providers process data outside the European Economic Area. Where they do, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

Your rights

You have the right to:

• get a copy of your data;
• correct it;
• delete it;
• restrict or object to processing;
• receive your data in a portable format where the law gives that right;
• withdraw consent.

To use any of these rights, write to us through the contact page; we answer within 30 days. You can also complain to your local data protection authority.

Cookies

We use only cookies that are strictly necessary: the sign-in session for your account. We use no analytics or advertising cookies, so there is no cookie banner. Details are on https://crawlseo.cloud/legal/cookies.

Security

Data is encrypted in transit and at rest by our hosting and database providers. Sign-in uses Google OAuth; we store no passwords. Each account can read only its own data. If a personal data breach occurs, we will notify the competent authority within 72 hours where the law requires it, and you without undue delay if it is likely to put your rights at high risk.

Children

The Service is not intended for anyone under 16, and we do not knowingly collect data from them.

Changes

We will post changes here with a new date. For significant changes we will email account holders at least 14 days before they take effect.