Privacy Policy

1. Who we are

Crawler Market (“we”, “us”) is a marketplace for desktop crawling / automation applications, operated as a sole proprietorship (individual business) registered in South Korea. Our main user base is in the United States and EU, and we process personal data as described below.

2. Information we collect

• Account information — the email address (and, if provided, display name) you use to register and sign in.
• Purchase and payment history — records of which apps you purchased, the amount and date, and the transaction/reference ID returned by our payment processors. We do not receive or store your full card number, bank account number, or other raw payment credentials — those are handled directly by PayPal / PortOne.
• License and device data — a device identifier (device fingerprint) for each device you activate a license on, used to enforce per-license device limits and to verify licenses when an app runs.
• App usage time — cumulative run time for each purchased app, reported periodically by the app itself (a “heartbeat”) while it is running. This is used for license verification, refund-eligibility checks, and developer usage statistics.
• Developer-uploaded files — if you register as a developer, the application binaries (Windows .exe, macOS .dmg, or Linux .AppImage files) and version metadata (changelog, checksum, etc.) you upload. Uploaded binaries are automatically scanned for malware via VirusTotal before being published.

3. How we use this information

We use this information to operate the marketplace: to create and secure your account, process purchases, issue and verify licenses, enforce device limits, evaluate refund requests, deliver app updates, run automated security scans on uploaded apps, calculate developer payouts, and send you transactional emails (e.g. purchase confirmations, verification links, update notifications).

4. Third parties we share data with

• Supabase — file storage (app screenshots and application binaries) and our primary database.
• VirusTotal — receives uploaded app files to run an automated malware scan before an app is published.
• Resend — sends transactional emails on our behalf (account verification, password reset, purchase and update notifications).
• PayPal / PortOne — process your payment directly and share back with us confirmation of payment and a transaction reference so we can grant access to the app you purchased. PortOne is used for Korean-Won-denominated payments in Korea; PayPal is used for other/global customers.

We do not sell your personal data. We only share it with the providers above as needed to operate the service.

5. Data retention

We retain account, purchase, license, and usage data for as long as your account is active, and for a reasonable period afterward as needed for tax, accounting, license-dispute, and fraud-prevention purposes.

6. Security

We use industry-standard measures (e.g. hashed passwords, access-controlled file storage, signed download URLs) to protect your data, but no system can be guaranteed 100% secure.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data (for example under the EU/UK GDPR or applicable US state privacy laws). You can request this by contacting us through your account. We have not yet completed a full legal review of these rights across every region we serve, and will update this section as that review is completed.

8. Children’s privacy

Crawler Market is not directed at children, and we do not knowingly collect personal data from children.

9. International data transfers

We operate from South Korea while primarily serving users in the United States and EU, so your data may be transferred to and processed in countries other than your own, including by the third-party providers listed above.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

11. Contact

Questions about this policy can be directed to us through your account or the support contact provided when you signed up.