Privacy Policy

1. Who We Are

Ugly Site Scraper is operated by Sobojinski Solutions LLC, a Wisconsin (USA) limited liability company (“we,” “us,” “our”). For privacy questions, contact privacy@uglysitescraper.com.

2. Scope of This Policy

This Privacy Policy covers two distinct categories of data:

• Customer data — information about you as a user of our Service (account, billing, usage).
• Search result data — publicly available business information returned by your searches, which may include personal data of business contacts within a B2B context.

Different sections of this policy apply depending on which category of data is involved.

3. Customer Data

3.1 What we collect about you

• Account Information: email address and an encrypted password.
• Payment Information: processed by Stripe. We do not store your credit card details. Stripe’s privacy policy governs their handling of payment data.
• Usage Data: your search queries (industry and city), search history, and credit usage.
• Cached Search Results: business data returned by your searches (names, addresses, phone numbers, emails, website URLs, screenshots, quality scores), cached temporarily to improve performance.
• Enrichment Data: when you run optional enrichment lookups on saved businesses, we collect and temporarily store additional data including possible contact names (sourced from public records, business websites, or phone carrier data), phone line type classifications (mobile, landline, or VoIP), email addresses found via email finder services, social media profile links (Facebook and LinkedIn) extracted from business websites, and outreach readiness check results. This data is associated with your account and the business record it relates to.

3.2 How we use customer data

• To provide and maintain the Service.
• To process payments and manage your credit balance.
• To display your search history and allow you to reload past results.
• To communicate with you about your account.
• To improve the Service based on aggregate usage patterns.

3.3 Lawful basis (EU/UK customers)

For customers in the EU or UK, we process customer data on the basis of:

• Contract: processing necessary to provide the Service you have signed up for (Article 6(1)(b) GDPR).
• Legitimate interest: improving the Service and securing our systems (Article 6(1)(f) GDPR).
• Legal obligation: retaining records required by tax and accounting laws (Article 6(1)(c) GDPR).

4. Search Result Data (B2B Contact Information)

4.1 What is collected

When you run a search, the Service queries the Google Places API and may scrape the corresponding business websites for publicly available information. The results may include:

• Business name, address, website, phone number
• Generic business email addresses (e.g., info@, contact@, sales@)
• Email addresses associated with named individuals at the business (e.g., john.smith@company.com)
• A contact name listed publicly on the business website
• Public review ratings
• Screenshot of the business website
• AI-generated commentary on the website’s visual quality

4.2 Sources

All search result data is sourced from:

• The Google Places API (subject to Google’s terms)
• Publicly accessible business websites — no logins, paywalls, or technical access barriers are bypassed

4.3 Lawful basis for processing personal data within search results (EU/UK)

Where a search result contains personal data of an identifiable individual in the EU or UK (such as a named contact), we process that data on the basis of legitimate interest under Article 6(1)(f) GDPR. The legitimate interest is the operation of a B2B sales intelligence service that enables our customers to identify potential business prospects.

We have completed a Legitimate Interest Assessment (LIA) documenting the balance between this legitimate interest and the rights of data subjects. A summary is available on request to privacy@uglysitescraper.com.

We do not process data of consumers in a personal capacity, and we do not knowingly process special category data (health, religion, political views, etc.).

4.4 Your right to object

If you are an individual whose personal data appears in our search results and you wish to object to processing, request deletion, or exercise other rights, contact privacy@uglysitescraper.com. We will honor verified requests within one calendar month and will exclude your data from future search results to the extent technically possible.

5. Data Storage and Security

Data is stored in Supabase (hosted on AWS) within the United States. We use row-level security policies so that users can only access their own account data. All connections use HTTPS/TLS encryption.

By using the Service, customers outside the United States acknowledge that their data is transferred to and processed in the United States.

6. Third-Party Services

We use the following third-party services that may process data:

• Supabase — Authentication and database hosting.
• Stripe — Payment processing.
• Google Places API — Business search data (your search queries are sent to Google).
• Anthropic (Claude AI) — Website quality scoring (website screenshots are sent to Anthropic for analysis).
• Outscraper — Business search data provider. Your search queries (niche and city) and the resulting business data are sourced through Outscraper’s API.
• Twilio — Phone number enrichment. Business phone numbers are sent to Twilio to identify line type (mobile, landline, or VoIP) and to look up registered contact names.
• Resend — Transactional email delivery. Your email address is used by Resend to send account-related emails such as notifications and support responses.
• Railway — Application hosting and infrastructure. The app and its data processing run on Railway’s cloud infrastructure.

Each third-party service has its own privacy policy governing their data handling.

7. Data Retention

• Account data is retained while your account is active and for a reasonable period after closure for legal and tax purposes.
• Cached search results are retained for 30 days, then automatically deleted.
• Enrichment data (possible contact names, phone type classifications, email addresses, and social media links) is cached for up to 30 days per business record and automatically cleared after that period.
• Search query history (your searches, not the result data) is retained for the lifetime of your account.
• You can request account deletion at any time by contacting us.

8. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent (where consent is the basis of processing)
• Lodge a complaint with your local data protection authority

EU residents may complain to their national data protection authority. UK residents may complain to the Information Commissioner’s Office (ICO). California residents have additional rights under CCPA/CPRA — see Section 9.

To exercise any right, contact privacy@uglysitescraper.com. We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal data we collect, use, and share
• The right to request deletion of your personal data
• The right to opt out of the sale of your personal data — we do not sell personal data to third parties
• The right to non-discrimination for exercising any of your privacy rights

To exercise any of these rights, contact us via the support page.

10. Cookies

We use essential cookies for authentication session management. We do not use tracking cookies or third-party analytics cookies.

11. Children

The Service is not directed to children under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Material changes will be communicated to active customers by email.

13. Contact

For privacy-related questions or to exercise any right above:

privacy@uglysitescraper.com

For general support, contact our support team.