Privacy Policy

Effective date: 23 April 2026 · Last updated: 23 April 2026

1. Data controller

The controller of your personal data under Article 4(7) GDPR is:

Jan Trzupek, sole proprietorship
ul. Widokowa 48, 32-091 Michałowice, Poland
NIP: 6762238453
Contact: admin@crawlbot.pl

For all matters concerning this policy or your personal data, please write to the email above.

2. What data we collect

We only process personal data that you provide to us directly or that is generated automatically by your browser when you visit our website. We do not purchase, scrape, enrich or otherwise obtain personal data about visitors from third parties.

• Account data: email address and password (stored as a hash), company name if provided, when you sign up for a trial or a paid account.
• Contact / lead data: email address, company and any message you send us through contact forms, the report download popup, the feature-vote tool or direct email.
• Usage data: product interactions (dashboards, reports) are logged internally for service operation and debugging.
• Technical data: IP address, user agent, referrer, approximate location (country/city derived from IP) and events captured by Google Analytics 4 via Google Tag Manager (see section 5).
• Billing data (only if you become a paying customer): the information required for invoicing under Polish tax law.

3. Why we process your data (legal basis)

• Providing the service — processing of account, usage and technical data is necessary to perform the contract with you (Art. 6(1)(b) GDPR).
• Responding to inquiries — lead / contact data is processed based on our legitimate interest in answering you (Art. 6(1)(f) GDPR).
• Analytics & product improvement — based on your cookie consent for non-essential cookies (Art. 6(1)(a) GDPR) and our legitimate interest in running the website (Art. 6(1)(f) GDPR).
• Legal obligations — invoicing and bookkeeping records are retained to comply with Polish accounting law (Art. 6(1)(c) GDPR).

4. How long we keep it

• Leads / contact-form submissions / feature votes — up to 12 months from the last interaction, then deleted.
• Account data — for the duration of your account, plus up to 12 months after closure for dispute resolution.
• Invoicing / accounting data — 5 years from the end of the fiscal year, as required by Polish tax law.
• Website analytics (GA4) — retained by Google for the duration we configure in GA (currently 14 months) and then automatically deleted.
• Server logs — up to 90 days for security and debugging purposes.

5. Cookies and third-party tools

We use a minimal set of third-party tools, all loaded directly by our website:

• Google Tag Manager (Google Ireland Ltd.) — loads our analytics tags.
• Google Analytics 4 (Google Ireland Ltd.) — website usage measurement. We enable IP anonymisation and signal npa=1 (non-personalised ads).
• Google Fonts — web fonts loaded from fonts.googleapis.com / fonts.gstatic.com.
• Tailwind CDN (cdn.tailwindcss.com) — CSS framework.

We do not use advertising pixels, remarketing tags, social-media trackers, session replay tools or visitor-identification / de-anonymisation services.

You can disable cookies in your browser at any time. Strictly necessary cookies (e.g. session login) will continue to work; analytics cookies will not be set if you decline them.

6. Data recipients & processors

We share personal data only with service providers we need to run the service:

• Hosting & infrastructure: Hetzner Online GmbH (Germany) — production servers.
• Analytics: Google Ireland Ltd. (see section 5).
• Email delivery: Google Workspace (Google Ireland Ltd.) for inbound/outbound email.
• Payments (when applicable): the payment processor disclosed at the checkout.

We do not sell your personal data to anyone.

7. International transfers

Some of our processors (in particular Google) may transfer data to the United States. These transfers are protected by the EU-U.S. Data Privacy Framework adequacy decision and, where applicable, by Standard Contractual Clauses.

8. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy of it,
• rectify inaccurate data,
• erase your data ("right to be forgotten"),
• restrict or object to processing based on our legitimate interest,
• receive your data in a portable, machine-readable format,
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, write to admin@crawlbot.pl. We respond within 30 days.

You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa — uodo.gov.pl.

9. Security

We take reasonable technical and organisational measures to protect your data: encrypted transport (HTTPS/TLS), password hashing, restricted access to production systems, firewalled servers, and regular backups. No transmission over the Internet is 100% secure, so we cannot guarantee absolute security.

10. Changes to this policy

If we materially change this policy, we will update the "Last updated" date above and, where required, notify you by email or in-app before the change takes effect.

11. Contact

Questions, complaints or requests: admin@crawlbot.pl.