Privacy Policy

1. Introduction

ByCrawl ("we," "us," or "our") is operated by Signalsurf, Inc., which is responsible for the personal data described here. This Privacy Policy explains how we collect, use, and protect information when you use the ByCrawl API and website at bycrawl.com.

2. Information We Collect

Account Information

• Email address (used to authenticate you and identify your account)
• Name and profile picture, if your sign-in provider supplies them

Usage Data

• API requests (endpoints called, timestamps, credit consumption)
• IP addresses and request metadata for rate limiting and abuse prevention

Payment Information

• Billing details are processed by Stripe. We do not store credit card numbers on our servers.

3. How We Use Your Information

• To provide and maintain the ByCrawl API service
• To authenticate your identity and manage your account
• To track credit usage and enforce rate limits
• To process payments and manage plans and credit purchases
• To send service-related communications (e.g., usage alerts, downtime notices)
• To detect and prevent abuse or unauthorized access

4. Data We Return via the API

ByCrawl retrieves publicly available data from third-party websites and platforms, including social networks, community and event sites, listing and review sites, search results, and any public URL you supply through our web fetch endpoint. The sources we support at any given time are listed in our API documentation and change as endpoints are added or retired.

We act as a technical intermediary — we do not store or index retrieved content long-term. API responses are generated on-demand and are not cached beyond short-term operational needs.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Stripe — for payment processing
• Hosting, database, and authentication providers that operate the Service
• Analytics providers that help us understand how the product is used
• Proxy and data-collection providers that retrieve public pages on your behalf. These providers receive the target URL or query, not your account details.
• Law enforcement or regulatory bodies, if required by law

6. Data Retention

Account data is retained while your account is active. API usage and billing records are retained while your account is active, and afterwards only for as long as we need them for billing, tax, security, or legal purposes. You may request account deletion by contacting us.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), hashed or encrypted API key storage, and access controls. However, no method of transmission over the Internet is 100% secure.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise these rights, contact us at devon@signalsurf.ai.

9. Cookies

We use essential cookies for authentication and session management, and analytics cookies to understand how the product is used. We do not use advertising cookies and we do not sell your data to advertisers.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

11. Contact

If you have questions about this Privacy Policy, contact us at devon@signalsurf.ai.