Privacy Policy

Last updated: March 23, 2026

Craawled (“we”, “our”, or “us”) operates the Craawled platform, an AI Search Visibility Analytics service. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. Your password is stored using bcrypt hashing and is never stored in plaintext.

Brand & Business Data

You provide brand names, website domains, descriptions, competitor information, and search queries you want to track. This data is used to power the core analytics service.

AI Search Results

We collect AI-generated search responses, brand mentions, sentiment scores, and citations from publicly available AI search providers. This is publicly available AI output, not private user data.

Team & Collaboration Data

If you use team features, we store team membership, roles, and invitation records.

Billing Information

Payment processing is handled by Stripe. We store only your Stripe customer ID and subscription ID. We never store or have access to your full credit card number.

Technical Data

We use essential cookies for authentication (session management) and functionality (remembering your selected brand). We do not use advertising or third-party tracking cookies.

2. How We Use Your Information

  • Providing the analytics service (crawling AI providers, analyzing brand mentions)
  • Account authentication and team management
  • Sending transactional emails (invitations, alert notifications, password resets)
  • Processing billing through Stripe
  • Improving the service and fixing issues

3. Third-Party Services

We use the following third-party services to operate Craawled:

  • Stripe — Payment processing (PCI-compliant)
  • Resend — Transactional email delivery
  • AI Providers (OpenAI, Anthropic, Google, Perplexity) — We send your tracked search queries to these providers to retrieve publicly available AI responses. No personal user data is sent to these providers.
  • Vercel — Application hosting
  • Supabase — Database hosting (PostgreSQL with encryption at rest)

4. Cookies

We use the following cookies, all of which are essential for the service to function:

  • Session cookie — Keeps you signed in (JWT-based, httpOnly, secure)
  • Brand selection cookie — Remembers which brand you're viewing in the dashboard

We do not use advertising cookies, analytics trackers, or third-party tracking pixels.

5. Data Retention

We retain your data for as long as your account is active. Crawl results and analytics data are retained to provide historical trend analysis. When you delete your account, all associated data is permanently removed.

6. Data Security

We take reasonable measures to protect your data, including: passwords hashed with bcrypt, HTTPS encryption in transit, database encryption at rest, secure httpOnly cookies, and strict Content Security Policy headers.

7. Your Rights

You have the right to:

  • Access your personal data
  • Rectify inaccurate data by updating your account settings
  • Delete your account and all associated data
  • Data portability — export your data
  • Withdraw consent at any time by deleting your account

To exercise these rights, contact us at the email address below or use the account deletion feature in your account settings.

8. Email Communications

We send transactional emails that are essential to the service (password resets, team invitations). Alert notification emails can be managed through your alert settings in the dashboard.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at privacy@craawled.com.