Privacy Policy

1. Introduction

Scrape & Enrich ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored in hashed form)
• Company name (optional)

2.2 Usage Data

We automatically collect information about your use of the Service:

• API requests made (endpoints, timestamps, response codes)
• IP addresses
• Credit consumption and purchase history

2.3 Payment Information

Payment processing is handled by third-party providers (e.g., Stripe). We do not store full credit card numbers. We may receive and store:

• Last four digits of your card
• Card type and expiration date
• Billing address

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process transactions and send related information
• Send administrative information (updates, security alerts)
• Respond to inquiries and provide customer support
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues or abuse
• Comply with legal obligations

4. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you request deletion
• API request logs: Retained for 90 days
• Transaction records: Retained for 7 years (legal requirement)

After account deletion, we may retain anonymized data for analytical purposes.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

5.1 Service Providers

Third parties that help us operate the Service:

• Cloud hosting providers (infrastructure)
• Payment processors (billing)
• Email service providers (notifications)

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or legal process
• Government requests
• Protection of our rights, privacy, safety, or property

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure password hashing (bcrypt)
• Regular security assessments
• Access controls and authentication
• Monitoring and logging

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can request a copy of your personal data in a structured, machine-readable format.

7.2 Correction

You can request correction of inaccurate or incomplete data.

7.3 Deletion

You can request deletion of your personal data, subject to certain exceptions (e.g., legal obligations).

7.4 Restriction

You can request that we restrict processing of your data in certain circumstances.

7.5 Objection

You can object to processing of your data for certain purposes.

To exercise these rights, contact us at privacy@scrapeandenrich.com.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers

9. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Maintain your session and preferences
• Analyze website traffic and usage
• Improve user experience

You can control cookies through your browser settings. Disabling cookies may affect functionality.

10. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@scrapeandenrich.com

Data Protection Officer: dpo@scrapeandenrich.com

14. GDPR-Specific Information

For users in the European Economic Area (EEA):

• Legal Basis: We process your data based on contract performance, legitimate interests, and consent where applicable.
• Data Controller: Scrape & Enrich is the data controller for your personal data.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

15. CCPA-Specific Information

For California residents:

• We do not sell personal information.
• You have the right to know what personal information we collect and how it's used.
• You have the right to request deletion of your personal information.
• You will not be discriminated against for exercising your privacy rights.