Privacy Policy
Last updated: March 16, 2026
1. Data Controller
The data controller responsible for your personal data is:
Dreams.Ventures sp. z o.o.
ul. Żytnia 14A
25-018 Kielce, Poland
NIP: 9592022430
KRS: 0000777495
REGON: 382873670
Email: [email protected]
2. What Data We Collect
2.1 Purchase Data
When you purchase a SilkCrawl Pro license, we collect the following data through our payment processor Stripe:
- Email address
- Name (as provided during payment)
- Billing address (if provided)
- Payment transaction details (processed and stored by Stripe)
We do not store credit card numbers or full payment details. All payment processing is handled by Stripe, Inc.
2.2 Website Usage Data
When you visit our website, we collect usage data through Google Analytics 4 (GA4):
- IP address (anonymized by Google Analytics)
- Browser type and version
- Pages visited, time spent, and scroll depth
- Referring website
- Button clicks and interactions (e.g., CTA clicks, FAQ opens, file downloads)
- Device type and operating system
2.3 Contact Form and Communication Data
When you contact us via the bug report form or email, we collect your name, email address, and the content of your message. If you submit a bug report, we may also collect your operating system and SilkCrawl version.
2.4 Software Usage
The SilkCrawl desktop application does not collect, transmit, or store any personal data. All crawl data, reports, and settings remain on your local machine. The Software does not phone home, track usage, or send analytics. The only network activity is the crawling of websites you explicitly instruct it to scan, and (for Pro users) the one-time license key verification.
3. Legal Basis for Processing
We process your personal data on the following legal grounds:
Under the EU/EEA General Data Protection Regulation (GDPR)
- Contract performance (Art. 6(1)(b) GDPR) — processing necessary to fulfill your purchase of a SilkCrawl Pro license and deliver the license key.
- Legitimate interest (Art. 6(1)(f) GDPR) — website analytics to improve our service, fraud prevention, and ensuring the security of our website.
- Legal obligation (Art. 6(1)(c) GDPR) — maintaining financial records as required by applicable tax law.
Under the UK General Data Protection Regulation (UK GDPR)
Where we process data of individuals in the United Kingdom, we rely on the same legal bases as listed above under the UK GDPR and the Data Protection Act 2018.
Other Jurisdictions
Where applicable, we process your personal data based on your consent (where required by local law), for the performance of a contract with you, or as otherwise permitted by applicable data protection laws in your jurisdiction.
4. How We Use Your Data
We use your personal data to:
- Process your purchase and deliver your license key
- Send purchase receipts and transaction confirmations
- Provide customer support
- Comply with legal and tax obligations
- Improve our website and services
5. Third-Party Processors
We share your data with the following third-party processors:
- Stripe, Inc. — payment processing. Stripe's privacy policy: stripe.com/privacy
- Google LLC — website analytics via Google Analytics 4 (GA4). Google's privacy policy: policies.google.com/privacy
- Hosting provider — website hosting and delivery
We do not sell, rent, or share your personal data for cross-context behavioral advertising. We have not sold personal information in the preceding 12 months.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encrypted connections (HTTPS/TLS) for all data transmitted to and from our website
- Secure payment processing through Stripe’s PCI DSS-compliant infrastructure — we never receive or store your full card details
- IP anonymization in Google Analytics to prevent storage of full IP addresses
- Access controls limiting who within our organization can access personal data
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Data Retention
- Purchase data: retained for the duration required by applicable tax law (currently 5 years from the end of the tax year in which the transaction occurred, as required by Polish law).
- Website analytics: anonymized data retained for up to 26 months.
- Support correspondence: retained for up to 3 years after last contact.
After the applicable retention period expires, personal data is securely deleted or anonymized.
8. Your Privacy Rights
Depending on where you are located, you may have some or all of the following rights regarding your personal data:
8.1 Rights for All Users
- Access — request a copy of the personal data we hold about you
- Correction — request that we correct inaccurate or incomplete data
- Deletion — request that we delete your personal data
- Data portability — receive your data in a structured, machine-readable format
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or sooner if required by your local law).
8.2 Additional Rights Under GDPR (EU/EEA)
If you are located in the European Union or European Economic Area, you also have the right to:
- Restrict processing (Art. 18 GDPR) — request that we limit how we use your data
- Object to processing (Art. 21 GDPR) — object to processing based on our legitimate interest
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
- Lodge a complaint with your local data protection authority. Our lead supervisory authority is the Polish data protection office (UODO), but you may contact the authority in your country of residence
8.3 Additional Rights Under UK GDPR
If you are located in the United Kingdom, you have equivalent rights under the UK GDPR and the Data Protection Act 2018. You may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
8.4 Rights for California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with the following additional rights:
- Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, and the purposes for which it was collected
- Right to delete — request deletion of your personal information, subject to certain exceptions
- Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising
- Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights
Categories of personal information collected: identifiers (name, email address), commercial information (purchase records), and internet activity information (website usage data via Google Analytics). We collect this data from you directly (purchases, contact form) and automatically (website analytics). We use it for the purposes described in Section 4.
8.5 Rights Under Other Laws
If you are located in a jurisdiction with applicable data protection laws (including but not limited to Australia, Canada, Brazil, Japan, or South Korea), you may have additional rights under those laws. We will honor your rights to the extent required by the laws of your jurisdiction. Contact us at [email protected] to exercise any applicable rights.
9. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you may lodge a complaint with the relevant supervisory authority in your jurisdiction:
- Poland (EU): Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa — uodo.gov.pl
- United Kingdom: Information Commissioner’s Office (ICO) — ico.org.uk
- Other EU/EEA countries: contact your local data protection authority
- Other jurisdictions: contact the relevant privacy or data protection regulator in your country
10. Cookies
Our website uses the following cookies:
Essential Cookies
- Stripe cookies — required for secure payment processing and fraud prevention on the pricing page. Set by Stripe, Inc.
Analytics Cookies
- Google Analytics (_ga, _ga_*) — used to distinguish users and sessions for website usage analysis. These cookies are set by Google Analytics 4 and help us understand how visitors interact with our website (pages visited, button clicks, scroll depth). IP addresses are anonymized. Data is retained for up to 26 months.
We do not use advertising, retargeting, or social media tracking cookies.
11. International Data Transfers
We are based in Poland (EU). Your personal data may be transferred to and processed in countries outside of your own, including the United States, where our third-party processors operate:
- Stripe, Inc. (United States) — payment processing
- Google LLC (United States) — website analytics
These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the European Commission, and equivalent mechanisms recognized under UK and other applicable data protection laws. Our processors maintain their own certifications and compliance programs for international data transfers.
12. Do Not Track
Some web browsers transmit “Do Not Track” (DNT) signals. Because there is no universally accepted standard for how to respond to DNT signals, our website does not currently respond to them. We use Google Analytics with IP anonymization enabled for all visitors.
13. Children’s Privacy
SilkCrawl is not directed at children under the age of 16 (or the age of digital consent in your jurisdiction, if higher). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at [email protected] and we will promptly delete it.
14. Changes to This Policy
We may update this privacy policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. If we make material changes, we will make reasonable efforts to notify you (e.g., via a notice on the Website). We encourage you to review this policy periodically.
15. Contact
For any questions about this privacy policy or your personal data, contact us at:
Email: [email protected]
Dreams.Ventures sp. z o.o.
ul. Żytnia 14A, 25-018 Kielce, Poland
This Privacy Policy should be read together with our Terms of Service.