CrawlerPal · GDPR
← Back to crawlerpal.comGDPR & Data Protection
Last updated 16 July 2026
CrawlerPal is built to be GDPR-aligned. We process the minimum personal data needed, store it in the EU where the service supports it, load analytics only with your consent, and offer a signed Data Processing Agreement on request, including for the free tier.
Our commitments
- EU-hosted storage. Our database and application are hosted in EU regions (Supabase and Vercel EU).
- Data minimisation. We collect only what’s needed to run a check, deliver an audit, or book a call. See the Privacy Policy for the full list.
- Consent-based analytics. Analytics and product-analytics tools (Google Analytics, Google Tag Manager, Microsoft Clarity) load only after you consent via our cookie banner, and you can change your choice at any time.
- No model training on your content. Your inputs are not used to train AI models.
- No cross-client sharing. Your data is never shared across client accounts.
- Transparent sub-processors. We document our sub-processors (storage, email, LLM, scheduling, analytics) and provide the current list on request.
Data Processing Agreement (DPA)
A signed DPA is available on request, even for the free Snapshot tier. It covers the roles of controller and processor, the categories of data and data subjects, security measures, sub-processor terms, and international-transfer safeguards (Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable). To request a DPA, email hello@crawlerpal.com.
International transfers
Storage of the data you submit stays in the EU. Some vendors we use for scheduling (Google Calendar & Meet) and consent-based analytics (Google Analytics & Tag Manager, Microsoft Clarity) are US-based; those transfers are protected by Standard Contractual Clauses, the EU-US Data Privacy Framework, or an equivalent safeguard, with supplementary measures as needed.
Your rights
You can access, correct, delete, restrict, or port your personal data, withdraw consent, and object to processing based on legitimate interests. To exercise any right, email hello@crawlerpal.com. You may also complain to your local data-protection authority.
Contact & data residency options
For sampling and analytics work in an Implementation Sprint, data can be hosted in the region of your choice where feasible. Talk to us about residency requirements before an engagement.