Privacy notice / review draft

How the CrawlClick pilot expects to handle personal data.

This draft describes the implemented data flows in plain language. It is not legal advice and is intentionally marked noindex until approved.

Who is expected to operate the service?

Skelf Research is the project operator name used by this website. Legal review must insert the full registered entity name, registration number, registered address, privacy contact and applicable jurisdiction before production.

What does an access request collect?

The form collects applicant type, name, work email, role, organisation, website, US-pilot confirmation, goals and qualification details such as traffic, platform, destination, topics or budget band. The Turnstile token is verified server-side and is not stored.

Which providers process data?

Cloudflare Turnstile processes anti-abuse signals. AWS SES delivers support and magic-link email. Stripe processes Checkout, US bank payments, refunds and Connect onboarding or payouts. Hosting, Postgres and object-storage providers must be named after deployment architecture is selected.

What operational records exist?

Postgres stores users, organisations, memberships, sessions, verified sites, application review state and payment identifiers. Object storage carries crawler, referral and insertion evidence. Authentication and site activation tokens are stored as hashes where recovery is unnecessary; the separate platform edge secret remains inside CrawlClick-operated infrastructure.

How long is information retained?

Legal review placeholder: define separate periods for rejected applications, account records, security logs, commercial evidence, tax/accounting records and deletion requests. The implementation currently records timestamps but does not encode a final legal retention schedule.

How can someone exercise a privacy right?

The proposed contact is hello@crawlclick.com. Legal review must confirm available rights, identity-verification procedure, response periods, complaint authority and any US state-specific disclosures.