Privacy Policy

Ibrahim EL Ouadifi, doing business as Better Scrape, Rabat, Morocco, Morocco(“Better Scrape”, “we”) is the controller of the personal data described in this policy. Contact us about privacy at [email protected].

• Account data: name, email address, password (stored hashed), and the profile and email shared by Google or GitHub if you sign in with them.
• Organization data: organization name, members, roles and invitations.
• Usage and technical data: IP address, browser and device information for active sessions, API key usage, job history, and service logs.
• Billing data: your plan, credit balance and order history. Payment details are collected by Polar, not by us (see below).
• Customer Data: the sitemaps you create and the data your jobs collect, including screenshots and HTML snapshots of failed pages.
• Communications: messages you send to support.

We use only the cookies needed to keep you signed in. We do not use advertising or third-party analytics cookies on the platform.

• To provide the Service: accounts, running jobs, storing results, exports, webhooks and support (performance of our contract with you).
• To keep it secure and enforce our Terms: abuse prevention, fraud detection, debugging and audit logs (legitimate interests).
• To send service emails: verification codes, invitations, billing and job notices (contract).
• To meet legal, tax and accounting obligations (legal obligation).
• To send product news, only with your consent; you can unsubscribe at any time.

We do not sell or share personal data for advertising.

Polar Software, Inc., 3500 South DuPont Highway, Dover, DE 19901, USA (“Polar”) is our reseller and merchant of record. When you buy a plan or credit pack, Polar collects your name, email, billing address, tax ID if provided, and payment details. Card data is processed by Polar’s payment partner Stripe; we never receive your full card number.

Polar shares with us what we need to run your account: your email, the products bought, subscription status and order history. Polar is responsible for the data it collects at checkout under its own Privacy Policy. For customer data we provide to Polar, Polar acts as our processor under its data processing addendum. Questions about Polar’s processing can go to [email protected].

Customer Data may contain personal data about other people. For that data you are the controller and we process it only on your instructions to provide the Service. You are responsible for having a lawful basis to collect it (see the acceptable use rules in our Terms). If you are an individual whose data appears in a customer’s results, please contact that customer; if you cannot identify them, write to us and we will forward your request.

We share personal data only with providers that help us run the Service, under contracts that protect it:

• Polar and Stripe: payments, tax and invoicing.
• Neon: database hosting.
• Steel: cloud browsers that load the pages your jobs visit.
• S3-compatible object storage: screenshots, snapshots and exported files.
• Our email delivery provider: transactional email.
• Axiom: service logs.
• Google and GitHub: only if you choose to sign in with them.
• Export destinations you configure (FTP, SFTP, S3, Google Cloud Storage, Azure Blob): only the files you ask us to send.

We may also disclose data when required by law, to protect our rights or users’ safety, or as part of a merger or acquisition, under equivalent protection.

We keep account and organization data while your account is open. Customer Data stays until you delete it or your account is closed; backups are overwritten on a rolling basis. Logs are kept for a limited period for security and debugging. Billing records are kept as long as tax and accounting law requires.

Our providers may process data outside your country, including in the United States. Where data leaves the EEA, the UK or Switzerland, we rely on adequacy decisions or the European Commission’s Standard Contractual Clauses.

We use encryption in transit, hashed passwords and API keys, encrypted export credentials, access controls and tenant isolation. If a breach affects your personal data we will notify you and the relevant authorities as the law requires, and within 72 hours where the GDPR applies.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent. California residents may also request to know what we collect and ask for deletion; we do not sell or share personal information, and we will not discriminate against you for exercising your rights.

Email [email protected] to exercise them. We will reply within one month. You can also complain to your local data protection authority.

The Service is not directed to children and is not for anyone under 18. We do not knowingly collect children’s data; contact us if you believe we have.

We will post changes here and update the effective date. For material changes we will notify account owners by email or in the platform.