1. Introduction and scope
This Privacy Policy explains how SquareKey Scrape collects, uses, shares and protects personal data when you visit our website at scrap.squarekey.org, contact us about a subscription, or use our web scraping API and related services (together, the "Service").
SquareKey Scrape is a business to business product. It provides residential proxies, JavaScript rendering, CAPTCHA solving, and AI structured extraction. Customers send URLs to our API and receive raw HTML or structured JSON in return. This policy covers the personal data we handle as a business, such as the contact and account details of the people who represent our customers and prospects. It also explains, in section 12, the limited role we play with respect to the content our customers retrieve through the Service.
By using the Service or contacting us, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use the Service.
2. Who we are
The Service is operated by SQUARE KEY (OPC) PRIVATE LIMITED, a One Person Company incorporated in India ("SquareKey Scrape", "we", "us" or "our"). For personal data we handle in connection with running our business and the Service, we act as the data controller, except where we act as a processor as described in section 12.
If you have any questions about this policy or about how we handle your personal data, you can reach us at team@squarekey.org.
3. Information we collect
We collect the categories of information described below.
(a) Information you provide to us
When you contact us, request a subscription, or correspond with our team, we collect the information you choose to share. This typically includes your name, your work email address, your company or organisation name, the contents of your enquiry or any message you send through a contact or call to action form, and billing details needed to set up and manage a paid plan. Subscriptions are arranged by contacting our team rather than through self serve checkout, so much of this information reaches us by email or direct communication.
(b) Information collected automatically
When you use the Service or visit our website, we and our infrastructure providers automatically collect certain technical information. This includes API request logs and metadata (such as timestamps, endpoints called, request volume, and response status), your IP address, and device and browser data (such as browser type, operating system, and referring pages). We also use cookies and analytics, as described in section 6.
(c) Target URLs and scraping parameters
To deliver the Service, we process the target URLs you submit and the scraping parameters you configure, such as rendering options, proxy settings, extraction schemas, and any instructions for AI structured extraction. We process this information to perform the request you ask us to perform and to operate, secure and improve the Service.
(d) Payment information
Payments are handled by third party payment processors. Card numbers and similar sensitive payment credentials are collected and processed by those processors, not by us. We do not store full payment card details on our systems. We may retain limited records such as invoices, the plan you are on, and confirmation that a payment was made.
4. How we use information
We use the information we collect to:
- Provide, operate and maintain the Service, including processing the API requests you submit.
- Set up accounts, manage subscriptions, and handle billing and invoicing.
- Respond to enquiries, provide customer support, and communicate with you about your account.
- Monitor for, investigate and prevent security incidents, fraud, abuse, and violations of our Terms of Service.
- Analyse usage, troubleshoot issues, and improve and develop the Service.
- Comply with our legal obligations and enforce our agreements.
- Send service related communications and, where permitted, occasional updates about features or changes.
5. Legal bases for processing
Where data protection law requires a legal basis for processing personal data, we rely on the following:
- Performance of a contract. To provide the Service to you and to manage our agreement, including billing and support.
- Legitimate interests. To secure and improve the Service, prevent abuse and fraud, understand how the Service is used, and run our business, provided these interests are not overridden by your rights.
- Consent. Where we ask for it, such as for certain cookies, analytics, or optional communications. You can withdraw consent at any time.
- Legal obligation. To comply with applicable laws, tax and accounting requirements, and lawful requests from authorities.
6. Cookies and analytics
Our website uses cookies and similar technologies to make the site work, to remember your preferences, and to understand how visitors use the site. We may use analytics services to collect aggregated and statistical information about traffic and usage, such as pages viewed and general location derived from IP address. You can control or block cookies through your browser settings. Blocking some cookies may affect how parts of the website function.
7. How we share information
We do not sell personal data. We share information only in the limited circumstances described below.
Service providers and sub-processors
We rely on trusted third parties to operate the Service. These include cloud hosting and content delivery network providers (such as Cloudflare), database and infrastructure providers, residential proxy network providers, payment processors, and analytics providers. These providers process information on our behalf and under contractual terms that require them to protect it and use it only to provide their services to us.
Legal and compliance disclosures
We may disclose information where we believe in good faith that it is necessary to comply with applicable law, a court order, or a lawful request from a public authority, to enforce our Terms of Service, or to protect the rights, property, or safety of SquareKey Scrape, our users, or others.
Business transfers
If we are involved in a merger, acquisition, financing, reorganisation, or sale of all or part of our assets, personal data may be transferred as part of that transaction. We will take reasonable steps to ensure it remains protected and that you are informed where required by law.
8. Data retention
We keep personal data for as long as it is needed for the purposes described in this policy. The retention period depends on the type of data and the reason we hold it. For example, we keep account and billing records for as long as your subscription is active and for a period afterward to meet legal, tax, and accounting obligations. We retain API request logs and metadata for a limited period for security, abuse prevention, troubleshooting, and service improvement. When data is no longer needed, we delete it or anonymise it.
9. Data security
We use technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, and loss. These include encryption in transit, access controls, network protections, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to address security risks responsibly.
10. International data transfers
We are based in India and our service providers may operate in other countries. As a result, personal data may be transferred to, stored in, or processed in jurisdictions outside your own, including jurisdictions whose data protection laws differ from those where you are located. Where such transfers take place, we take steps to ensure that the information remains protected and that the transfer is carried out in accordance with applicable law, including by using appropriate safeguards where required.
11. Your rights
Depending on where you are located and the law that applies to you, you may have rights over your personal data, including the right to access a copy of it, to correct inaccurate information, to request deletion, to request portability, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.
For individuals in India, these rights are governed by India's Digital Personal Data Protection Act, 2023 (the DPDP Act). For individuals in the European Economic Area and the United Kingdom, these rights are governed by the General Data Protection Regulation (GDPR) and equivalent UK law. The exact rights available to you, and any limits on them, depend on the applicable law.
To exercise any of these rights, contact us at team@squarekey.org. We will respond within the time required by applicable law and may need to verify your identity before acting on a request. If you believe we have not handled your personal data properly, you also have the right to complain to your local data protection authority. Please note that where we act as a processor on behalf of a customer, requests relating to data the customer collects through the Service should be directed to that customer, as explained in section 12 and in our Terms of Service.
12. Data you process through the Service
The Service lets customers retrieve content from third party websites that they choose. For any personal data contained in the content a customer collects from target sites, the customer is the data controller and SquareKey Scrape acts as a processor on the customer's behalf. We process that content only to deliver the requested results to the customer and as permitted by our agreement with them.
The customer is responsible for ensuring that its collection and use of data through the Service is lawful, including having a valid legal basis, respecting the terms and access rules of target websites, and complying with applicable data protection and other laws. Your use of the Service for these purposes is governed by our Terms of Service.
13. Children's privacy
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from anyone under the age of 18 in connection with the operation of our business. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.
14. Third-party websites and links
The Service may operate on, and our website may link to, third party websites and services that we do not control. This policy does not apply to those third parties. We are not responsible for their content or privacy practices, and we encourage you to review the privacy policies of any third party site you visit or interact with.
15. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Service. When we make material changes, we will update the date shown at the top of this page and, where appropriate, provide additional notice. Your continued use of the Service after an update takes effect means you accept the revised policy.
16. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at team@squarekey.org.