Privacy Policy

Last updated: 22 July 2026

1. Scope and controller

This Privacy Policy explains how CPL TECH MB, company code 306621764, Olimpiečių g. 3E-R80, LT-09235 Vilnius, Lithuania ("ScrapeFleet", "we") processes personal data when you visit scrapefleet.ai, register for the waitlist, or use a ScrapeFleet account. For this data, ScrapeFleet is the data controller within the meaning of the EU General Data Protection Regulation ("GDPR").

Contact for privacy matters: team@scrapefleet.ai.

2. What we collect and why

2.1 Account data

E-mail address, password (stored hashed), plan and settings. Legal basis: performance of a contract (GDPR Art. 6(1)(b)). Without it we cannot provide an account.

2.2 Billing data

Subscription plan, invoices, payment status, and payment identifiers returned by our payment provider. Card details are entered directly on the payment provider's hosted pages and never reach our systems. Legal bases: contract (Art. 6(1)(b)) and legal obligations, including accounting law (Art. 6(1)(c)).

2.3 Usage and log data

API calls, scraper runs, credit consumption, IP addresses, timestamps, and technical logs needed to operate, secure, meter and bill the Service. Legal bases: contract (Art. 6(1)(b)) and our legitimate interest in security, abuse prevention and service improvement (Art. 6(1)(f)).

2.4 Waitlist and correspondence

E-mail address and the information you send us (e.g. your intended use case). Legal basis: steps prior to entering a contract (Art. 6(1)(b)) and legitimate interest in responding (Art. 6(1)(f)).

2.5 Website analytics

We use Google Analytics with cookies as described in the Cookie Policy. Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.

3. Recipients

We share personal data only with: (a) service providers acting on our instructions — hosting and storage (Amazon Web Services, EU (Stockholm) region), e-mail delivery, payment processing (Revolut), analytics (Google) — under data processing agreements; (b) authorities where the law requires; (c) professional advisers under confidentiality. We do not sell personal data.

4. International transfers

Our primary infrastructure is located in the European Union. Where a provider processes personal data outside the EU/EEA, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses, with supplementary measures where appropriate. Details for Service-side subprocessors are listed in the DPA.

5. Retention

• Account data: for the life of the account and up to 12 months after closure, unless a longer period is required for legal claims.
• Billing records: 10 years, as required by Lithuanian accounting law.
• Technical logs: up to 12 months.
• Waitlist/correspondence: up to 24 months after last contact.
• Anonymised, aggregated statistics: indefinitely.

6. Your rights

Subject to the conditions of the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing (including objecting to processing based on legitimate interest), to data portability, and to withdraw consent at any time without affecting prior processing. Contact team@scrapefleet.ai; we respond within one month. You may also lodge a complaint with a supervisory authority — in Lithuania, the State Data Protection Inspectorate (VDAI, vdai.lrv.lt), or the authority of your habitual residence.

7. Automated decision-making

We do not make decisions producing legal or similarly significant effects on you based solely on automated processing. Automated abuse detection may flag accounts for human review.

8. Children

The Service is a business tool and is not directed at children under 16. We do not knowingly collect their data.

9. Changes

We will announce material changes to this policy by e-mail or in-Service notice before they take effect. The date above reflects the latest revision.