Privacy Policy
Last updated: 1 November 2026
This policy explains what personal data CrawlerScan processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
Data controller
Sellverge, Via Cipro 33, 09032 Assemini (CA), Italy, VAT 04151000926.
Contact: privacy@sellverge.com
What we process and why
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Email, username, hashed password, account dates, email verification status | Creating and running your account, sending verification emails | Contract |
| X (Twitter) account ID and username, if you sign in with X | Signing you in | Contract |
| Plan, scan count, subscription dates, Stripe customer and subscription IDs | Applying your plan and managing payments | Contract; legal obligation for tax records |
| Scanned URLs and results, saved for Unlimited plan users | Scan history, detail pages and PDF reports | Contract |
| IP address | Preventing abuse and applying scan and login limits | Legitimate interest in keeping the service secure |
| Email and ID of an account changed or deleted by an administrator | Keeping a record of administrative actions, including deletion requests | Legitimate interest; legal obligation where it documents a GDPR request |
| Usage data collected by analytics tools | Understanding how the site is used | Consent, which you can withdraw at any time |
Scans by visitors without an account, and by users on other plans, are not saved to a scan history. Card details are entered with Stripe and never reach our servers.
Who receives your data
- Render (hosting and database)
- Stripe (payments)
- Resend (transactional email)
- X (only if you choose to sign in with X)
- Google Analytics and DataFast (analytics, only if you accept)
Some of these providers are based outside the European Economic Area, or may process data there. Where this happens, transfers rely on the safeguards the GDPR requires, such as an adequacy decision or standard contractual clauses.
How long we keep it
- Account data and scan history: until you ask us to delete your account.
- Record of administrative actions on an account (such as a deletion, including the account's email): 12 months, to show that requests were carried out.
- IP addresses for rate limiting: held in memory for up to 24 hours.
- Payment and tax records: for as long as the law requires.
- Analytics data: according to the settings of each analytics provider.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw consent at any time. To do so, write to privacy@sellverge.com. To delete your account, send the request from the address you registered with.
You can also complain to your data protection authority. In Italy this is the Garante per la protezione dei dati personali.
Cookies
See the Cookie Policy.