Privacy Policy

This Privacy Policy explains how Crawley Cloud, operated by DevCloud Software, collects, uses, and protects your information. We act as a data controller for your account data and as a data processor for the data you scrape.

1. Information we collect

• Account data: email, username, hashed password.
• Billing data: handled by Stripe; we store plan, subscription status and the last 4 digits / billing metadata — not full card numbers.
• Usage data: projects, scrapers, schedules, run logs, and items scraped.
• Technical data: IP address, request logs, and error diagnostics.

2. How we use it

• To provide and operate the Service (run crawls, store datasets, send exports).
• To process payments and enforce plan quotas.
• To send transactional email (invites, scheduled exports, password resets) via SendGrid.
• To monitor reliability and debug errors (e.g. Sentry).
• To prevent abuse and comply with legal obligations.

3. Sub-processors

We share data with service providers strictly to run the Service: Stripe (payments), SendGrid (email), OpenAI (only when you use AI extraction, the page content you submit is sent to OpenAI), and error-monitoring/hosting providers. We do not sell your personal data.

4. Data retention

We retain account data while your account is active. Scraped datasets are retained per your plan's retention window and can be deleted by you at any time. You can request account deletion by contacting us.

5. AI agents and MCP connections

You can connect an AI app (such as Claude, ChatGPT, Cursor or VS Code) to your account through our MCP server (how it works). When you do:

• What the app can do: read and change what your account can — projects, crawler settings, runs, scraped data, schedules, alerts, integrations and project sharing — with your role on each project. It can't see your password, your API keys (beyond their last 4 characters), or the proxies, site logins, headers, webhook URLs and database or storage keys saved in your projects, and it can't pay or move money: a plan change is a Stripe link you open yourself.
• How access works: you approve each app on our consent page, and it then uses OAuth tokens (or a token you create in the dashboard). Access tokens expire after an hour and refresh tokens after 90 days. You can disconnect any app at any time in Dashboard → AI agents, and changing your password disconnects all of them.
• What we keep: for each connection, the app's name and the address it returns to, hashed tokens (never the tokens themselves), and when it was created and last used; the one-time sign-in codes expire after 10 minutes and are cleared out afterwards. Every change an app makes is recorded in your account's activity log, like changes you make yourself, and kept with your account.
• What we don't collect: your conversations with the AI app. We only receive the tool calls it sends us. The answers we return (for example your project settings, scraped rows and run logs) go to the app you connected, which processes them under its provider's own terms and privacy policy.
• Content from websites: pages, scraped rows and other third-party content are passed to the app as data, never as instructions.

6. Your rights (GDPR / CCPA)

Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. To exercise these rights, email support@devcloudsoftware.com.

7. Security

We use HTTPS/HSTS, encrypted secrets, hashed passwords, and access controls. No method of transmission is 100% secure, but we work to protect your data.

8. Cookies

We use strictly necessary cookies/local storage for authentication. We do not use third-party advertising trackers.

9. Contact

Privacy questions: support@devcloudsoftware.com or contact us.