1. Information We Collect
We collect the following personal information from you:
- Account Information: Your email address and access keys.
- Billing and Transaction Information: Information related to your invoices and payment
transactions.
- Connection Information: When you connect to our headless browsers, we may collect your
originating IP address for security, logging, and potential troubleshooting purposes.
- Session Metrics: Data about your usage of our headless browsers, including connection
and disconnection times, data uploaded and downloaded, and DNS requests.
- Website Analytics: When you visit our website, we automatically collect certain information
such as your IP address, browser type, and general geographic location.
- Communication Data: If you contact us for support, we may collect your email address and
the content of your communication.
2. How We Use Your Information
We use your personal information for the following purposes:
- Email Address: Your email address is collected for the purpose of communicating with you
regarding your account and our Service, including important updates, service-related announcements,
and responding to your inquiries.
- Access Keys: To securely authenticate and authorize your access to our headless browser
services.
- Client IP Addresses: We may use your originating IP address to enhance the security of
our Service, monitor and log connections for auditing and troubleshooting, and to comply with
legal obligations.
- Billing and Transaction: For maintaining financial records, processing payments, and ensuring
the accuracy of billing.
- Session Metrics: To calculate billing based on your usage, to analyze and improve our
Service's performance and features, and for monitoring the usage of our platform.
- Website Analytics: To analyze website traffic patterns, understand user behavior on our
website, and improve the user experience.
3. Sharing of Your Information
We may share your personal information with the following categories of recipients:
- Third-Party Service Providers: We share your email address with Mailersend for the purpose of sending you emails related to your account, support, and marketing (if
you have consented). Their privacy policy will apply to their processing of your information.
As outlined in our Terms of Service, Timescale, Clerk, and Stripe, they manage our database,
user authentication, and payment processing, respectively. They will have access to relevant
personal information to provide these services. We encourage you to review their privacy policies.
- Legal Authorities: We may disclose your personal information to law enforcement agencies
or other governmental authorities if required by law or legal process, or if we believe in good
faith that such disclosure is necessary to comply with a legal obligation, protect our rights
or property, or the safety of our users or others.
- Business Transfers: In the event of a merger, acquisition, reorganization, sale of all
or a portion of our assets, or similar transaction, your personal information may be transferred
to the acquiring entity as part of the assets being transferred. We will endeavor to provide
notice if your personal information will be subject to a different privacy policy as a result
of the transfer.
4. Data Retention
We will retain your personal information for as long as necessary to fulfill the purposes for
which it was collected, as described in this Privacy Policy, or as required by law.
- Financial Records: We will retain financial records for as long as we are legally required
to do so for accounting and tax purposes.
- Client IP Addresses: We will retain client IP addresses associated with headless browser
connections for 6 months for security and logging purposes. After this period, it may be anonymized
or securely deleted, unless we are required to retain it for a longer period by law.
- Session Metrics and Website Analytics: We will retain session metrics and website analytics
data for as long as we consider it valuable for service improvement and business analysis.
Even after you close your account, we may retain certain information for legitimate business
purposes, such as to comply with legal obligations, resolve disputes, and enforce our
agreements.
5. Legal Basis for Processing Personal Data
We process your personal data in accordance with applicable data protection laws, including
the General Data Protection Regulation (GDPR) as your data is processed in Germany.
We process the following categories of your personal data because it is necessary for the
performance of our contract with you (our Terms of Service) to provide our service:
- Email Address: To communicate essential information about your account and the Service.
- Access Keys: To authenticate and authorize your access to the headless browsers, which
is the core function of the Service.
- Session Metrics (for billing): To track your usage and calculate the fees for the Service
as per our pricing model.
We process the following categories of your personal data based on our legitimate interests in
operating and improving our business, provided that such interests do not override your
fundamental rights and freedoms:
- Session Metrics (for service improvement and monitoring): We analyze usage patterns to
understand how users interact with our Service, identify areas for improvement, and ensure the
stability and security of our platform. Our legitimate interest lies in providing a better and
more secure service.
- Website Analytics (IP address, browser type, general geolocation): We analyze website
traffic to understand user behavior, optimize our website content, and improve the user experience
for visitors. Our legitimate interest lies in enhancing our online presence and user engagement.
We process the following category of your personal data to comply with legal obligations to
which we are subject:
- Invoice and Transaction Information: We retain financial records to comply with accounting
and tax laws.
We will process your email address for marketing communications only if you have freely given
us your explicit consent to receive such communications. You have the right to withdraw your
consent at any time by contacting us at [email protected]. The withdrawal of your consent will not affect the lawfulness of processing based on
consent before its withdrawal.
6. Your Rights
You have certain rights regarding your personal data under applicable privacy laws. These
rights may include:
- Right to Access: You have the right to request access to the personal data we hold about
you and to receive a copy of this information.
- Right to Rectification: You have the right to request that we correct any inaccurate or
incomplete personal data we hold about you.
- Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete
your personal data under certain circumstances. Please note that we may be required to retain
certain information (such as financial records and potentially DNS requests, as you mentioned)
for legal or legitimate business purposes. We will inform you of any such reasons if you request
deletion.
- Right to Restriction of Processing: You have the right to request that we restrict the
processing of your personal data under certain circumstances.
- Right to Object to Processing: You have the right to object to the processing of your
personal data for certain purposes, such as direct marketing.
- Right to Data Portability: You may have the right to receive your personal data in a structured,
commonly used, and machine-readable format and to transmit that data to another controller.
Exercising Your Rights:To exercise any of these rights, please contact us at [email protected]. We will process your request as soon as possible, which may take several days, and in
accordance with applicable data protection laws. We may need to verify your identity before
fulfilling your request.
7. Security Measures
We have implemented and maintain reasonable technical and organizational security measures
designed to protect your personal data from unauthorized access, use, disclosure, alteration,
or destruction. These measures include:
- Encryption of data in transit using secure protocols (e.g., HTTPS).
- Encryption of data at rest in our databases.
- Access controls to ensure that only personnel with a legitimate need have access to your
personal data.
- Regular security assessments and updates to our systems and infrastructure.
- Firewalls to prevent unauthorized access to our systems.
- Data backup and disaster recovery procedures.
8. International Data Transfers
Your personal data that we collect is primarily hosted on servers located in Germany.
Therefore, your personal data will be transferred to and processed in Germany.
Germany is part of the European Economic Area (EEA), which generally provides a high level of
data protection in accordance with the General Data Protection Regulation (GDPR). By using our
Service and providing us with your personal data, you acknowledge and consent to the transfer
of your personal data to Germany for the purposes described in this Privacy Policy.
If you are accessing our Service from a country outside of Germany, please be aware that the
data protection laws of Germany may differ from the laws of your country.
9. Contact Information for Privacy Inquiries
If you have any questions, concerns, or requests regarding this Privacy Policy or our data
practices, please contact us at:
[email protected]