Privacy Policy

Last updated: March 2026. How SearchClaw handles your data.

Data We Collect

Account information — Email address and name provided at registration. Passwords are hashed with bcrypt and never stored in plaintext.
Usage metrics — Endpoint called, credits consumed, response times, and timestamps. Query content is not logged by default.
Billing data — Payment processing is handled by Stripe. We store only your Stripe customer ID, not card details.

How We Use Your Data

Service delivery — Authenticating requests, enforcing rate limits, and tracking credit usage against your plan.
Billing — Processing subscription payments and generating invoices via Stripe.
Service improvement — Aggregated, anonymized usage metrics to improve reliability and performance. No individual query content is analysed.

Data Retention

Cache data — Redis cache entries auto-expire within 1–24 hours depending on content type.
Usage records — Retained for 90 days for billing reconciliation, then aggregated and anonymized.
Zero retention mode — Set X-Data-Retention: none to skip all caching and query logging per request.

Your Rights

Data export — Request a full export of your account data and usage history at any time.
Data deletion — Request complete deletion of your account and all associated data. Processed within 30 days.
GDPR compliance — EU residents have full rights under GDPR including access, rectification, portability, and erasure.

Third-Party Services

Stripe — Payment processing. Subject to Stripe's Privacy Policy.
Cloudflare — CDN and DDoS protection. Traffic is routed through Cloudflare tunnels.
No data sharing — Scraped or extracted content is never shared with third parties or used for model training.

Contact

For privacy-related questions or to exercise your data rights, contact us.

Email: privacy@searchclaw.dev