Privacy Policy.
This Privacy Policy describes how Krawlr, LLC ("Krawlr," "we," "our," or "us") collects, uses, processes, stores, and protects information in connection with the Krawlr platform and related services (the "Service").
Scope
This Privacy Policy applies to information processed by Krawlr in connection with providing the Service to customers and users.
Krawlr primarily processes:
- Business-related information
- Publicly available web data
- Customer-authorized system data
Krawlr does not operate as a consumer data broker and does not intentionally collect sensitive personal data.
Categories of Information We Process
A. Account and Usage Information
Information associated with authorized users of the Service, including:
- Name, email address, and organization affiliation
- Authentication and access credentials (hashed or tokenized where applicable)
- Usage logs, audit logs, and activity metadata
- Support and communications records
B. Customer-Submitted Information
Information customers provide directly to Krawlr, including:
- Domains, URLs, systems, or environments submitted for analysis
- Configuration settings, preferences, and instructions
- Credentials, access tokens, API keys, or other authentication mechanisms provided voluntarily by the customer to enable authorized access
C. Public Web Data
Information that is publicly accessible on the internet at the time of collection, such as:
- Public website content
- Public company, product, pricing, or marketing information
- Publicly visible metadata and structural information
D. Customer-Authorized Restricted Data
Where a customer explicitly provides credentials or access mechanisms, Krawlr may process data from:
- Password-protected systems
- Restricted platforms
- Internal tools or environments
Only where the customer represents that it owns or controls the system, or is otherwise authorized to grant access.
Information We Do Not Intentionally Collect
Krawlr does not intentionally collect:
- Sensitive personal data (e.g., SSNs, government IDs, biometric data)
- Personal data about private individuals unrelated to business contexts
- Login credentials for third-party services unless explicitly provided by the customer
- Data from systems accessed without customer authorization
If such data is inadvertently processed, Krawlr will take reasonable steps to minimize retention.
Purpose of Processing
Krawlr processes information solely to:
- Provide, operate, and maintain the Service
- Perform analysis, aggregation, and data transformation
- Generate insights, reports, and exports requested by customers
- Improve platform performance, reliability, and security
- Respond to support requests
- Comply with legal and contractual obligations
Data Ownership and Use
Krawlr retains ownership of all data collected, generated, or derived through the Service, as described in the Terms of Service.
Customers are granted access rights and export capabilities based on their license tier. Exported data remains subject to contractual restrictions and this Privacy Policy.
Data Retention
Krawlr retains information only as long as reasonably necessary to:
- Provide the Service
- Meet contractual requirements
- Comply with legal obligations
Retention periods may be defined by contract.
Customers may request deletion of account data, subject to applicable law and legitimate business needs.
Security Measures
Krawlr implements commercially reasonable administrative, technical, and organizational safeguards designed to protect information, including:
- Role-based access controls
- Encryption in transit
- Secure hosting environments
- Monitoring and logging
- Least-privilege access principles
No system can guarantee absolute security.
International Data Processing
Information may be processed in the United States or other jurisdictions where Krawlr or its subprocessors operate.
Appropriate safeguards are applied where required by law.
Privacy Rights
Depending on jurisdiction, users may have rights under applicable data protection laws (such as GDPR or CPRA), including the right to:
- Access personal data
- Request correction or deletion
- Object to or restrict certain processing
Requests may be submitted to privacy@krawlr.app.
Third-Party Links and Systems
The Service may reference or connect to third-party websites or systems.
This Privacy Policy does not apply to third-party privacy practices, which are governed by their own policies.
Children's Privacy
The Service is intended for business use only and is not directed to individuals under the age of 18. Krawlr does not knowingly collect children's personal data.
Updates to This Policy
Krawlr may update this Privacy Policy from time to time.
Material changes will be communicated where required by law.
Continued use of the Service constitutes acceptance of the updated Policy.
Contact
Privacy & Compliance: privacy@krawlr.app
Legal: legal@krawlr.app
Company: Krawlr, LLC
Jurisdiction: Delaware, USA