Privacy Policy

Last updated: April 2026

Information We Collect

When you use smbcrawl, we collect certain information to provide and improve our service. This includes:

  • Account information provided through Clerk (name, email address)
  • Usage data such as API request volume, endpoints accessed, and response times
  • API request metadata including IP addresses, user agent strings, and timestamps
  • Marketing attribution and conversion data from public smbcrawl surfaces, including landing path, current page path, referrer host, UTM parameters, experiment tags, and a first-party browser session identifier stored in sessionStorage
  • Payment information processed through Stripe (we do not store full card numbers)

How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and operate the smbcrawl API service
  • To improve and optimize API performance and reliability
  • To measure which public pages, calls to action, and waitlist flows are performing so we can improve acquisition surfaces
  • To process billing and manage your subscription
  • To provide customer support and respond to your requests
  • To detect, prevent, and address security issues and abuse of the service

Data We Process On Your Behalf

Business data that you query through the smbcrawl API is processed to fulfill your enrichment requests. This data is sourced from publicly available information. Enrichment results are cached temporarily according to your plan tier's cache TTL settings to improve performance and reduce redundant processing. Data is not stored beyond these cache periods.

Marketing Attribution and Session Storage

On public marketing pages such as the homepage, docs, pricing, and waitlist flow, smbcrawl stores a first-party session identifier and first-touch attribution snapshot in your browser's sessionStorage. This lets us connect page views, CTA clicks, playground opens, and waitlist conversion steps within a single browsing session without using third-party analytics cookies.

The attribution snapshot can include the current and landing page path, referrer host, UTM parameters, and optional experiment tags. We use this data for internal funnel reporting, product decisions, and growth analysis. The sessionStorage values expire when your browser session ends, although conversion and reporting events that you trigger may still be retained on our backend under the data retention rules below.

Data Sharing

We do not sell your personal information. We share data only with the following service providers that are necessary to operate smbcrawl:

  • Clerk -- Authentication and user account management
  • Stripe -- Payment processing and subscription management
  • Neon -- Database hosting and storage
  • Vercel -- Application hosting and infrastructure
  • x402 / Coinbase -- Cryptocurrency payment processing (USDC on Base)

Data Retention

Enrichment cache data is retained according to your plan tier's cache TTL settings. Account data is retained for as long as your account is active. API usage logs are retained for billing and analytics purposes. Marketing attribution and acquisition-funnel records are retained for internal reporting, abuse monitoring, and conversion analysis. When you delete your account, your personal data is removed, though anonymized usage statistics may be retained.

Security

We take the security of your data seriously. All data is encrypted in transit using TLS. Our infrastructure is hosted on Vercel with enterprise-grade security. API keys are hashed before storage. We regularly review our security practices and update them as needed.

Your Rights

You have the following rights regarding your data:

  • Access -- Request a copy of the personal data we hold about you
  • Deletion -- Request deletion of your account and associated personal data
  • Export -- Export your data in a machine-readable format
  • Correction -- Request correction of inaccurate personal data

To exercise any of these rights, contact us at support@smbcrawl.dev.

Cookies

smbcrawl uses Clerk authentication cookies for signed-in sessions. On public marketing surfaces, we also use browser sessionStorage to retain a first-party marketing session identifier and first-touch attribution snapshot for the duration of the active browser session. We do not use third-party advertising cookies.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of smbcrawl after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this privacy policy or our data practices, please contact us at support@smbcrawl.dev.

Jarobe
smbcrawl