Privacy Policy
Last updated: 4 November 2026
This policy explains what personal data CrawlXray collects and how it is used. The data controller is Thirteen Bytes.
What we collect
- Account and contact details: your name, email address and company, when you sign up, request a scan or contact us.
- Website data: the website addresses you submit and, for deep scans, the files, database content and settings we read from servers you connect.
- Payment details: handled by Paddle as Merchant of Record. We do not receive or store full card numbers.
- Usage data: basic logs such as IP address, browser type and pages visited, used to run and secure the site.
How we use it
- To run scans, produce reports and carry out cleanups you approve.
- To send scan results, alerts, receipts and service messages.
- To answer your questions and provide support.
- To keep the service secure and prevent misuse.
Website and server data
Data read during a deep scan is used only to produce your results. Copies are deleted when your job closes. Files removed during a cleanup are kept in a quarantine folder on your own server so they can be restored. We do not read customer payment data stored on your site.
Sharing
We share data only with service providers that help us run CrawlXray: Paddle for payments, our hosting provider and our email provider. We do not sell personal data.
How long we keep it
Account details are kept while your account is open and deleted within 30 days of closing it, except where the law requires us to keep records such as invoices.
Your rights
You can ask to see, correct, export or delete your personal data, or object to how it is used, by emailing support@crawlxray.com. You can also complain to your local data protection authority.
Cookies
The website uses only cookies needed to run it and remember your login. We do not use advertising cookies.
Changes
We will post any updates on this page with a new date.