Privacy Policy

CrawlGraph (“we”, “us”) is operated by Search Engine Wizards. This policy explains what personal data we collect when you use crawlgraph.com, why we collect it, and the rights you have. We aim to collect as little as possible.

Data we collect

• Email address - when you purchase a lifetime licence. Used to send magic-link login emails and purchase receipts.
• Payment metadata - Stripe Checkout collects and stores your payment details; we never see or store your full card number. We receive the Stripe customer id, the amount paid, and the currency.
• Search queries - domains you look up are cached on our servers to speed up repeated lookups. The shared lookup cache is separate from account records; connector research jobs do retain their query and account ownership so only the authorized owner can resume them.
• Analytics - if you accept cookies we use Google Analytics 4 to record anonymous usage (pages viewed, buttons clicked, country). We also use Meta Pixel to measure launch ad performance and build advertising audiences after consent.
• Server logs - standard request logs (IP, user-agent, timestamp) are kept for 30 days for security and abuse prevention.

Legal basis

We process your email and payment metadata under the contract you enter when buying a licence. Analytics and advertising measurement cookies are only set after your explicit consent via the banner shown on first visit. Server logs are kept under our legitimate interest in keeping the service secure.

Third-party processors

We share the minimum necessary data with: Stripe (payment processing), Google Analytics (if you consent), our transactional email provider (magic links and receipts), Meta Pixel (if you consent, for ad measurement), and our hosting provider (server infrastructure). We do not sell data to anyone, ever.

Cookies

We use the essential first-party cookie cb_token for normal account login. cg_connector_nonce binds a connector authorization to its original browser, andcg_connector_reviewer binds a restricted reviewer session to its authorization transaction. The reviewer cookie lasts at most 45 minutes, capped by the transaction and review window; it does not provide normal account access. These connector cookies are essential security bindings. With consent, we also use Google Analytics cookies (_ga, _ga_*) and Meta Pixel cookies (_fbp, and sometimes _fbc). You can withdraw consent at any time by clearing site data in your browser.

Connected research platforms

When you explicitly approve a registered connector client for crawlgraph:read, you authorize it to send public domain and competitor queries to crawlgraph and receive bounded Common Crawl research results. Claude and OpenAI process queries and results under their own policies. Tools do not expose private customer billing or account data, send outreach, or trigger OAuth marketing emails. Normal requested magic-link emails still support account sign-in.

We retain the grant, client, resource, scope, account identifier, credential hashes, quota counters and owner-bound job metadata to enforce authorization and prevent abuse. Backend opaque credentials are stored as SHA-256 hashes. The private reviewer password uses scrypt and is never stored in cleartext. Consent, login verification and reviewer routes are excluded from analytics; authentication and MCP logs exclude transaction, code and token query values.

Authorization transactions expire after 45 minutes, codes after 2 minutes and access tokens after 10 minutes. Refresh tokens have a 30-day lifetime, bounded by the grant's absolute 90-day lifetime. Used refresh hashes remain as replay-detection tombstones through family expiry. Research jobs have a 7-day retention window. Expired records are removed by bounded opportunistic cleanup and an operator cleanup command, rather than guaranteed deletion at the instant of expiry. Minimal revoked-grant and security audit metadata remain until expiry and cleanup. Reviewer windows last at most 30 days; normal account-cookie behavior is unchanged.

Disconnect at account connectionsto stop future use of that grant. This cannot erase copies already received by a platform. A pending worker may finish after revocation, but the revoked grant cannot retrieve its result. Quota already consumed is not refunded.

Your rights

Under GDPR you have the right to access, correct, export, or delete the personal data we hold about you, and to object to processing. Email [email protected] and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Retention

We keep account data for as long as your licence is active plus two years for tax and accounting obligations. Shared backlink cache entries have a 30-day expiry. Expiry makes an entry ineligible for reuse; it does not guarantee deletion at that exact time.

Contact

Questions about this policy? Email [email protected]. Material changes to this policy will be announced on this page with a new “last updated” date.