Privacy Policy
Last Updated: December 27, 2025
CrawlKit ("we", "us", "our", or the "Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website at https://crawlkit.sh and our web scraping API services.
By using CrawlKit, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies, please do not use our Service.
1. Information We Collect
1.1 Information You Provide
When you register for an account or use our Service, we collect:
| Data Type | Purpose | Required |
|---|---|---|
| Email address | Account creation, communication, notifications | Yes |
| Full name | Account identification | Yes |
| Company name | Business identification, invoicing | No |
1.2 Information Collected Automatically
When you access our Service, we automatically collect:
Technical Data:
- IP address
- Browser type and version
- Device type and operating system
- Referring URL
- Pages visited and time spent
- API usage patterns and request logs
Usage Data:
- Credit consumption
- API endpoints accessed
- Request timestamps
- Error logs
1.3 Information from Third Parties
Payment Processor (LemonSqueezy):
We use LemonSqueezy to process payments. We do NOT store your payment card details. LemonSqueezy may share with us:
- Transaction confirmation
- Billing address
- Payment status
- Subscription status
For LemonSqueezy's data practices, please review their privacy policy at https://www.lemonsqueezy.com/privacy
2. How We Use Your Information
2.1 Service Delivery
- Creating and managing your account
- Processing transactions and billing
- Providing API access and tracking usage
- Delivering customer support
2.2 Communication
- Sending service-related notifications
- Responding to inquiries and support requests
- Providing updates about the Service
- Sending promotional emails (with your consent)
2.3 Service Improvement
- Analyzing usage patterns to improve features
- Monitoring and preventing abuse
- Debugging and fixing issues
- Developing new features
2.4 Legal and Security
- Complying with legal obligations
- Enforcing our Terms of Service
- Preventing fraud and unauthorized access
- Protecting our rights and property
3. Legal Basis for Processing (GDPR & KVKK)
If you are located in the European Economic Area (EEA) or Turkey, we process your personal data based on the following legal grounds:
| Legal Basis | Examples |
|---|---|
| Contract Performance | Account creation, service delivery, billing |
| Legitimate Interests | Service improvement, security, fraud prevention |
| Legal Obligation | Tax records, responding to legal requests |
| Consent | Marketing communications, optional cookies |
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience. For detailed information, please see our Cookie Policy.
Types of cookies we use:
- Essential Cookies: Required for authentication and security
- Analytics Cookies: Help us understand how you use the Service (Google Analytics, Datafast)
- Marketing Cookies: Used to deliver relevant advertisements
You can manage cookie preferences through your browser settings or our cookie consent banner.
5. Data Sharing and Disclosure
We do NOT sell your personal information. We may share your data with:
5.1 Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| LemonSqueezy | Payment processing | Email, name, billing info |
| Google Analytics | Usage analytics | Anonymized usage data, IP |
| Datafast | Analytics | Usage patterns |
| Cloud hosting providers | Infrastructure | All service data (encrypted) |
5.2 Legal Requirements
We may disclose your information if required by:
- Law, regulation, or legal process
- Government or regulatory authorities
- To protect our rights, privacy, safety, or property
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
6. International Data Transfers
Your data may be transferred to and processed in countries outside your residence, including Turkey and countries where our service providers operate.
For transfers outside the EEA, we ensure appropriate safeguards through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Other legally approved mechanisms
7. Data Retention
We retain your personal data for as long as necessary to:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 2 years |
| Transaction records | 10 years (legal requirement) |
| API usage logs | 1 year |
| Support communications | 3 years |
| Marketing preferences | Until consent withdrawn |
After the retention period, data is securely deleted or anonymized.
8. Your Rights
8.1 Under GDPR (EEA Residents)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for consent-based processing
- Complaint: Lodge a complaint with a supervisory authority
8.2 Under KVKK (Turkish Residents)
Under Turkey's Personal Data Protection Law (KVKK), you have similar rights including:
- Learning whether your data is processed
- Requesting information about processing
- Learning the purpose of processing
- Knowing third parties to whom data is transferred
- Requesting correction of incomplete or inaccurate data
- Requesting deletion or destruction of data
- Objecting to automated decisions
8.3 Exercising Your Rights
To exercise any of these rights, contact us at:
Email:support@crawlkit.sh
We will respond to your request within 30 days. We may ask for verification of your identity before processing requests.
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
Technical Measures:
- SSL/TLS encryption for data in transit
- Encryption at rest for sensitive data
- Secure API authentication
- Regular security audits
- Access controls and logging
Organizational Measures:
- Limited access to personal data
- Regular security training
- Incident response procedures
- Data protection assessments
While we strive to protect your data, no method of transmission or storage is 100% secure. You acknowledge this inherent risk.
10. Children's Privacy
CrawlKit is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
If you believe a child has provided us with personal information, please contact us at support@crawlkit.sh.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.
12. Do Not Track Signals
Some browsers transmit "Do Not Track" (DNT) signals. Currently, we do not respond to DNT signals as there is no industry standard for compliance.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.
For significant changes, we will notify you via:
- Email to your registered address
- Prominent notice on our website
Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Data Protection Officer
For privacy-related inquiries or to exercise your rights, contact:
15. Supervisory Authority
If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.
For Turkish residents, you may contact:
Kisisel Verileri Koruma Kurumu (KVKK)
Website: https://www.kvkk.gov.tr
16. Contact Us
For any questions about this Privacy Policy, please contact:
By using CrawlKit, you acknowledge that you have read and understood this Privacy Policy.