CrawlerPal · Privacy
← Back to crawlerpal.comPrivacy Policy
Last updated 16 July 2026
CrawlerPal collects the minimum personal data needed to run an AI-visibility check, deliver a GEO audit, or book a call. We store it in the EU, we load analytics only with your consent, and we never train AI models on your content.
1. Who we are
CrawlerPal is a service operated by Magic Pulpo Kft., a company registered in Hungary (the “we”, “us”, or “Controller”). For any privacy question, or to exercise your rights, contact hello@crawlerpal.com.
2. What we collect
We only collect what you give us or what is needed to run the service:
| Data | Why | Source |
|---|---|---|
| Work email, name (optional) | To send your score/audit and follow up | You provide it |
| Company website, market, competitors, target prompts | To run the visibility check or audit | You provide it |
| Chat transcript of the Instant Visibility Check | To compute your directional score and improve our scoring | Generated in use |
| Booking details, name, email, company, requested time, and any notes | To schedule a consultation and create the calendar invite and video-meeting link | You provide it |
| Usage, device, and interaction data (via cookies and similar technologies) | Website analytics and product improvement, only with your consent | Collected automatically |
| Hashed IP address and user agent | Rate-limiting and abuse prevention only | Collected automatically |
We do not knowingly collect special-category data. Please don’t submit it.
3. Why we’re allowed to use it (legal bases)
- Performance of a contract / pre-contract steps, to run the check, audit, or booking you requested.
- Legitimate interests, to operate, secure, and improve the service (e.g. rate-limiting, scoring calibration), balanced against your rights.
- Consent, for analytics and product-analytics cookies, and for any optional marketing follow-up; you can withdraw it at any time.
4. Cookies & analytics
We use two kinds of cookies and similar technologies:
- Essential, needed to run the site and the check (e.g. security, rate-limiting, remembering your language). These don’t require consent.
- Analytics & product-analytics, loaded only after you consent via our cookie banner. These help us understand how the site is used and where to improve it. They include Google Analytics and Google Tag Manager, and Microsoft Clarity (which records anonymised, input-masked session interactions and heatmaps).
You can accept or decline analytics in the cookie banner and change your choice at any time. Declining doesn’t affect your ability to use CrawlerPal.
5. Sub-processors
We use a small set of vendors to run CrawlerPal. We choose EU regions for storage where the service supports it; some analytics and scheduling vendors are US-based and covered by the safeguards below.
| Processor | Purpose | Region / basis |
|---|---|---|
| Supabase | Database & storage | EU |
| Vercel | Application hosting | EU |
| Anthropic | LLM used to compute the directional score | API processor; not used to train on your data |
| Resend | Transactional & confirmation email | Email delivery |
| Google (Calendar & Meet) | Scheduling and video-call links for booked consultations | US · SCCs / EU-US Data Privacy Framework |
| Google (Analytics & Tag Manager) | Website analytics and tag management (consent-based) | US · SCCs / EU-US Data Privacy Framework |
| Microsoft (Clarity) | Product analytics, heatmaps & masked session replay (consent-based) | US · SCCs / EU-US Data Privacy Framework |
Where a processor operates outside the EEA, transfers are covered by Standard Contractual Clauses, the EU-US Data Privacy Framework, or an equivalent safeguard. A current sub-processor list is available on request.
6. What we don’t do
- We do not train AI models on your content.
- We do not sell your personal data.
- We do not share your data across client accounts.
- We do not load analytics or product-analytics cookies without your consent.
7. How long we keep it
We retain intake, booking, and audit data for as long as needed to deliver the service and for a reasonable period afterwards for follow-up, then delete or anonymise it. Analytics data is retained for the limited windows configured in Google Analytics and Microsoft Clarity. You can ask us to delete your data sooner at any time.
8. Your rights
Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, to withdraw consent, and to object to processing based on legitimate interests. To exercise any of these, email hello@crawlerpal.com. You also have the right to lodge a complaint with your local supervisory authority.
9. Data Processing Agreement
A signed Data Processing Agreement (DPA) is available on request, including for the free tier. See our GDPR page.
10. Changes
We may update this policy. We’ll change the “last updated” date above and, for material changes, notify you where appropriate.