Privacy Policy

Last updated: 1 January 2025

CrawlRaven (“we”, “us”, “our”) is committed to protecting your personal information. This policy explains what data we collect, why we collect it, and how we use it.

1. Who we are

CrawlRaven is a professional SEO audit platform operated by CrawlRaven Ltd, a company registered in England and Wales. Our registered address is available on request. If you have any questions about this policy, contact us at privacy@crawlraven.com.

2. What data we collect

We collect the following categories of personal data:

  • Account data: Name, email address, company name, and billing information when you create an account or make a purchase.
  • Usage data: Information about how you use CrawlRaven, including pages crawled, audit configurations, feature usage, and session logs.
  • Technical data: IP address, browser type, device type, operating system, and referring URLs — collected automatically when you visit our website.
  • Communications data: Any messages, support tickets, or emails you send to us.
  • Marketing preferences: Whether you have opted in or out of marketing communications.

3. How we use your data

We use your data to:

  • Provide and improve the CrawlRaven platform and services
  • Process payments and manage your subscription
  • Send transactional emails (account confirmations, invoices, password resets)
  • Send marketing emails if you have opted in (you can opt out at any time)
  • Provide customer support
  • Monitor and improve site security and performance
  • Comply with legal obligations
  • Conduct analytics to understand how our product is used

4. Legal basis for processing

Under UK GDPR and EU GDPR, we rely on the following legal bases for processing:

  • Contract performance: Processing necessary to provide the services you have subscribed to.
  • Legitimate interests: Analytics, fraud prevention, and improving our product.
  • Consent: Marketing communications (which you can withdraw at any time).
  • Legal obligation: Compliance with applicable laws and regulations.

5. Data sharing

We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our platform, including:

  • Payment processors (Stripe) — for billing and subscription management
  • Cloud infrastructure providers — for hosting and data storage
  • Analytics providers (Vercel Analytics) — for anonymous usage analytics
  • Email service providers — for transactional and marketing email delivery

All third-party providers are contractually required to maintain the confidentiality and security of your data and to use it only for the purposes we specify.

6. Cookies

We use cookies and similar technologies to operate the platform, remember your preferences, and improve our services. Essential cookies are required for the site to function. Analytics cookies are only set with your consent. You can manage cookie preferences in your browser settings at any time.

7. Data retention

We retain your account data for as long as your account is active and for up to 7 years afterwards for tax and legal compliance purposes. Audit data and crawl results are retained for 12 months and then automatically deleted unless you export them. You may request deletion of your data at any time (see Section 9).

8. International transfers

Some of our service providers are located outside the UK and EEA. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO or European Commission.

9. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Request deletion of your personal data (“right to be forgotten”)
  • Object to processing based on legitimate interests
  • Withdraw consent for marketing communications at any time
  • Data portability — receive your data in a machine-readable format
  • Lodge a complaint with the UK Information Commissioner's Office (ICO)

To exercise any of these rights, email privacy@crawlraven.com. We will respond within 30 days.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is encrypted in transit (TLS 1.2+) and at rest. Access to personal data is restricted to authorised personnel on a need-to-know basis.

11. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will notify registered users by email and update the “Last updated” date at the top of this page. Continued use of CrawlRaven after any changes constitutes acceptance of the updated policy.

12. Contact us

If you have any questions or concerns about this privacy policy or how we handle your data, contact our Data Protection contact: privacy@crawlraven.com. You can also write to us at our registered address or visit our contact page.