Privacy policy
Last updated: 14 October 2026
This policy explains what personal data we collect when you use decrawl.com and the DeCrawl service, why, and your rights.
Who is responsible
DECRAWL DATA, S.L., Calle Garriga 9, Puerta B, 07609 Llucmajor, Illes Balears, Spain. CIF B93877264. Contact: contact@decrawl.com.
What we collect
- Account data: your email, and your name and company if you add them. If you sign in with Google or GitHub, we receive your email and name from them.
- Billing data: plan, invoices and payment status. Stripe processes your card. We never see or store your full card number.
- Usage data: files you upload, reports, checks used, and technical logs such as IP address, browser and times of access.
- Activity log: when you sign in, upload files, run checks, view or download reports, view plans and change settings.
- Cookies: see our Cookie policy.
The files you upload may contain personal data about other people. For that data you are the controller and we act as your processor. See our Data processing agreement.
Why we use it, and on what legal basis
- To create your account, run the service, bill you and send service emails (like "your report is ready"). Basis: contract.
- To keep the service secure, prevent abuse and fix errors. Basis: our legitimate interest.
- To provide support: our staff can view your reports to help you. Basis: contract.
- To keep an activity log that helps us support users and improve the service. Basis: our legitimate interest.
- To measure visits to our public pages with analytics. Basis: your consent. You can withdraw it at any time on our Cookie policy page.
- To keep invoices and accounting records. Basis: legal obligation.
We don't sell your data. We don't use your files to train AI models.
How long we keep it
- Uploaded files: 30 days after upload.
- Reports, fixes and screenshots: while your account is open.
- Account data: while your account is open. When you delete your account, we delete your data within 30 days. Backups are overwritten within 30 more days.
- Invoices and accounting records: 6 years, as Spanish law requires.
- Server logs: up to 90 days.
Who we share it with
We use service providers for hosting, file storage, email delivery, payments, analytics and parts of the visual check. They only process data on our instructions. The current list is on our Subprocessors page.
Some providers are outside the European Economic Area, for example in the United States. In those cases we rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can ask to access, correct or delete your data, to limit or object to how we use it, and to get a copy in a portable format. Write to contact@decrawl.com. We answer within one month.
If you think we haven't handled your data correctly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Age
DeCrawl is not for people under 18.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before the change applies.