Privacy Policy

1. Introduction

CrawlFAQs ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered documentation generator service. CrawlFAQs crawls web applications, captures screenshots, analyzes user interfaces using vision AI, and generates comprehensive documentation including FAQs, help articles, and tutorials.

By using CrawlFAQs, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

We collect several types of information to provide and improve our Service:

2.1 Account Information

When you create an account via Supabase Auth, we collect:

• Email address
• Password (encrypted and stored by Supabase)
• Organization name
• User preferences and settings

2.2 Project and Crawl Data

When you use CrawlFAQs to crawl web applications, we collect:

• URLs of pages crawled
• Screenshots of web pages
• HTML content and accessibility trees
• UI interaction events
• Login credentials for authenticated crawling (encrypted with AES-256)
• Extracted facts from AI vision analysis

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card information. We only store:

• Stripe customer ID
• Subscription status and tier
• Billing history

2.4 Usage Analytics

We collect usage data to improve the Service:

• Pages crawled per month
• Number of projects created
• Documentation generation requests
• Error logs and crash reports (via Sentry)

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide the Service: Crawl web applications, capture screenshots, analyze UI with OpenRouter's AI models (GPT-4o-mini for text, Qwen 2.5 VL for vision), and generate documentation
• To process payments: Manage subscriptions and billing through Stripe
• To improve the Service: Analyze usage patterns to enhance features and fix bugs
• To communicate with you: Send service updates, technical notices, and support messages
• To ensure security: Detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations: Respond to legal requests and prevent harm

4. Data Storage & Security

We implement industry-standard security measures to protect your data:

• Database: User data and metadata are stored in Supabase Postgres with encryption at rest
• Screenshots: Stored in Supabase Storage with secure access controls
• Credentials: Login credentials for authenticated crawling are encrypted with AES-256 encryption before storage
• Transmission: All data is transmitted over HTTPS (TLS 1.2+)
• Access control: Role-based access controls limit data access to authorized personnel only
• Monitoring: Sentry error monitoring helps us detect and respond to security incidents

Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Third-Party Services

CrawlFAQs integrates with the following third-party services:

• Supabase: Authentication, database, and file storage. View their Privacy Policy
• Stripe: Payment processing. View their Privacy Policy
• OpenRouter: AI processing (GPT-4o-mini for text generation, Qwen 2.5 VL for vision analysis). Screenshots and text are sent to OpenRouter for analysis. View their Privacy Policy
• Sentry: Error monitoring and crash reporting. View their Privacy Policy

These third-party services have their own privacy policies. We are not responsible for their privacy practices.

6. Cookies & Tracking

CrawlFAQs uses cookies to maintain your authentication session via Supabase Auth. These are essential cookies required for the Service to function. We do not use third-party tracking cookies or analytics cookies. Session cookies are stored in your browser and are deleted when you log out or your session expires.

7. Data Retention

We retain your data as follows:

• Screenshots: Processed by AI and then deleted after documentation generation (typically within hours)
• Generated documentation: Retained until you delete the project
• Account data: Retained until you delete your account
• Billing records: Retained for 7 years for tax and legal compliance
• Error logs: Retained for 90 days via Sentry

When you delete your account, all associated data including projects, crawl runs, and documentation is permanently removed from our systems within 30 days.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your account and associated data
• Right to data portability: Export your generated documentation in Markdown, HTML, or JSON format
• Right to object: Object to our processing of your personal data
• Right to restrict processing: Request that we limit how we use your data
• Right to withdraw consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us at privacy@crawlfaqs.com. We will respond to your request within 30 days.

9. Children's Privacy

CrawlFAQs is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@crawlfaqs.com, and we will take steps to delete such information.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your country. By using CrawlFAQs, you consent to the transfer of your data to the United States and other countries where our service providers operate. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the new Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

privacy@crawlfaqs.com

For general support inquiries, contact: support@crawlfaqs.com