Privacy Notice

Last updated: June 2026

1. Who we are (data controller)

This service ("CrawlFence") is operated by NOVAVISIONCONSULTING-FZCO(trading as CrawlFence), Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE. Responsible person: Dr. Sabrina Marion Masur. Contact: contact@Novavision-strategy.com. NOVAVISIONCONSULTING-FZCO acts as the data controller for the personal data described below.

2. Categories of personal data we collect

• Scan input: the URL you submit for scanning and the timestamp.
• Scan results: the public findings produced by the scan.
• Contact / delivery data: email address you provide to receive a paid report.
• Payment data: order, transaction, and billing information collected and processed by our payment provider Paddle (we receive transaction status and identifiers only — full card data never reaches us).
• Technical data: IP address, user-agent, device/browser information, and request logs needed to operate the service securely.
• Support communications: messages you send us by email.

3. Purposes and legal bases

• Provide the scan and deliver the paid report — performance of contract.
• Process payments, invoicing, and tax compliance — performance of contract and legal obligation (handled by Paddle as Merchant of Record).
• Security, abuse prevention, rate-limiting, and fraud detection — legitimate interests.
• Service improvement and aggregated analytics — legitimate interests.
• Responding to support requests — performance of contract / legitimate interests.
• Legal compliance and responding to lawful requests — legal obligation.

4. Data sharing recipients

We share personal data only with the following categories of recipients:

• Paddle.com Market Ltd — our Merchant of Record and payment processor. Paddle handles checkout, billing, payment methods, tax, invoicing, refund processing, and related customer service. See Paddle's privacy notice at paddle.com/legal/privacy.
• Hosting and infrastructure providers (e.g. Cloudflare, Supabase) acting as processors on our instructions.
• Email delivery providers used to send paid reports and transactional emails.
• Professional advisers (legal, accounting) where required.
• Authorities where we are legally required to disclose data.

5. International transfers

Personal data may be processed outside your country, including in the EU, UK, US, and UAE. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses with our processors.

6. Data retention

• Free scan records: up to 24 months, after which they are deleted or anonymised.
• Paid report records and delivery email: up to 24 months from purchase, then deleted unless we need to retain them for legal/accounting reasons.
• Payment and invoice records (held by Paddle and required for tax law): typically up to 10 years.
• Server and security logs: typically up to 90 days.
• Support emails: up to 24 months after the matter is closed.

7. Your rights

Subject to applicable law (including the GDPR where it applies), you have the right to: access your personal data; request correction or deletion; restrict or object to certain processing; data portability; withdraw consent where processing is based on consent; and lodge a complaint with your local data protection authority. To exercise any of these rights, email contact@Novavision-strategy.com. We will respond within one month.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, access controls, least-privilege server-side keys, row-level security in our database, and signed webhook verification for payment events. No system is perfectly secure; we cannot guarantee absolute security.

9. Cookies and tracking

CrawlFence uses only essential cookies and local storage needed to operate the site (e.g. session, CSRF, and checkout state). Paddle may set cookies during checkout that are strictly necessary to complete your purchase. We do not currently use advertising cookies. If we add analytics or marketing cookies in the future, we will request consent where required.

10. Children

CrawlFence is not directed at children under 16 and we do not knowingly collect personal data from them.

11. Changes to this notice

We may update this notice from time to time. Material changes will be reflected by updating the "Last updated" date above.

12. Contact