Privacy Policy

1. Information We Collect

We collect the following personal information from you:

  • Account Information: Your email address and access keys.
  • Billing and Transaction Information: Information related to your invoices and payment transactions.
  • Connection Information: When you connect to our headless browsers, we may collect your originating IP address for security, logging, and potential troubleshooting purposes.
  • Session Metrics: Data about your usage of our headless browsers, including connection and disconnection times, data uploaded and downloaded, and DNS requests.
  • Website Analytics: When you visit our website, we automatically collect certain information such as your IP address, browser type, and general geographic location.
  • Communication Data: If you contact us for support, we may collect your email address and the content of your communication.

2. How We Use Your Information

We use your personal information for the following purposes:

  • Email Address: Your email address is collected for the purpose of communicating with you regarding your account and our Service, including important updates, service-related announcements, and responding to your inquiries.
  • Access Keys: To securely authenticate and authorize your access to our headless browser services.
  • Client IP Addresses: We may use your originating IP address to enhance the security of our Service, monitor and log connections for auditing and troubleshooting, and to comply with legal obligations.
  • Billing and Transaction: For maintaining financial records, processing payments, and ensuring the accuracy of billing.
  • Session Metrics: To calculate billing based on your usage, to analyze and improve our Service's performance and features, and for monitoring the usage of our platform.
  • Website Analytics: To analyze website traffic patterns, understand user behavior on our website, and improve the user experience.

3. Sharing of Your Information

We may share your personal information with the following categories of recipients:

  • Third-Party Service Providers: We share your email address with Mailersend for the purpose of sending you emails related to your account, support, and marketing (if you have consented). Their privacy policy will apply to their processing of your information. As outlined in our Terms of Service, Timescale, Clerk, and Stripe, they manage our database, user authentication, and payment processing, respectively. They will have access to relevant personal information to provide these services. We encourage you to review their privacy policies.
  • Legal Authorities: We may disclose your personal information to law enforcement agencies or other governmental authorities if required by law or legal process, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect our rights or property, or the safety of our users or others.
  • Business Transfers: In the event of a merger, acquisition, reorganization, sale of all or a portion of our assets, or similar transaction, your personal information may be transferred to the acquiring entity as part of the assets being transferred. We will endeavor to provide notice if your personal information will be subject to a different privacy policy as a result of the transfer.

4. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, or as required by law.

  • Financial Records: We will retain financial records for as long as we are legally required to do so for accounting and tax purposes.
  • Client IP Addresses: We will retain client IP addresses associated with headless browser connections for 6 months for security and logging purposes. After this period, it may be anonymized or securely deleted, unless we are required to retain it for a longer period by law.
  • Session Metrics and Website Analytics: We will retain session metrics and website analytics data for as long as we consider it valuable for service improvement and business analysis.

Even after you close your account, we may retain certain information for legitimate business purposes, such as to comply with legal obligations, resolve disputes, and enforce our agreements.

5. Legal Basis for Processing Personal Data

We process your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) as your data is processed in Germany.

We process the following categories of your personal data because it is necessary for the performance of our contract with you (our Terms of Service) to provide our service:

  • Email Address: To communicate essential information about your account and the Service.
  • Access Keys: To authenticate and authorize your access to the headless browsers, which is the core function of the Service.
  • Session Metrics (for billing): To track your usage and calculate the fees for the Service as per our pricing model.

We process the following categories of your personal data based on our legitimate interests in operating and improving our business, provided that such interests do not override your fundamental rights and freedoms:

  • Session Metrics (for service improvement and monitoring): We analyze usage patterns to understand how users interact with our Service, identify areas for improvement, and ensure the stability and security of our platform. Our legitimate interest lies in providing a better and more secure service.
  • Website Analytics (IP address, browser type, general geolocation): We analyze website traffic to understand user behavior, optimize our website content, and improve the user experience for visitors. Our legitimate interest lies in enhancing our online presence and user engagement.

We process the following category of your personal data to comply with legal obligations to which we are subject:

  • Invoice and Transaction Information: We retain financial records to comply with accounting and tax laws.

We will process your email address for marketing communications only if you have freely given us your explicit consent to receive such communications. You have the right to withdraw your consent at any time by contacting us at [email protected]. The withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.

6. Your Rights

You have certain rights regarding your personal data under applicable privacy laws. These rights may include:

  • Right to Access: You have the right to request access to the personal data we hold about you and to receive a copy of this information.
  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
  • Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete your personal data under certain circumstances. Please note that we may be required to retain certain information (such as financial records and potentially DNS requests, as you mentioned) for legal or legitimate business purposes. We will inform you of any such reasons if you request deletion.
  • Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
  • Right to Object to Processing: You have the right to object to the processing of your personal data for certain purposes, such as direct marketing.
  • Right to Data Portability: You may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Exercising Your Rights:To exercise any of these rights, please contact us at [email protected]. We will process your request as soon as possible, which may take several days, and in accordance with applicable data protection laws. We may need to verify your identity before fulfilling your request.

7. Security Measures

We have implemented and maintain reasonable technical and organizational security measures designed to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

  • Encryption of data in transit using secure protocols (e.g., HTTPS).
  • Encryption of data at rest in our databases.
  • Access controls to ensure that only personnel with a legitimate need have access to your personal data.
  • Regular security assessments and updates to our systems and infrastructure.
  • Firewalls to prevent unauthorized access to our systems.
  • Data backup and disaster recovery procedures.

8. International Data Transfers

Your personal data that we collect is primarily hosted on servers located in Germany. Therefore, your personal data will be transferred to and processed in Germany.

Germany is part of the European Economic Area (EEA), which generally provides a high level of data protection in accordance with the General Data Protection Regulation (GDPR). By using our Service and providing us with your personal data, you acknowledge and consent to the transfer of your personal data to Germany for the purposes described in this Privacy Policy.

If you are accessing our Service from a country outside of Germany, please be aware that the data protection laws of Germany may differ from the laws of your country.

9. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

[email protected]