Privacy Policy

Last updated: 14 September 2026

1. Controller

The controller of your personal data is TULAN LTD., a company registered in the Commercial Register of the Republic of Bulgaria under UIC (ЕИК) 205830754, with its registered office and address of management at 1618, Ilcho Dimitrov 7a str., Sofia, Bulgaria. For any question about your data or to exercise your rights, contact us at info@tool1.app, phone +359 879 151150.

This policy explains how we process personal data when you visit crawler.tool1.app, create an account and use the Crawer platform (the “Platform”), in line with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

2. Data we process

• Account data – name, email address, phone number (if given), login details, role and account settings. If you sign in with Google, we receive your name, email address and Google account identifier.
• Billing data – purchased packages, amounts, payment order status, invoices and credit history. Card payments are handled by the payment providers; we do not receive or store card numbers.
• Usage data – the campaigns you create and their settings (such as URLs, keywords, locations, competitors and report email addresses), runs, results, notifications and credit charges.
• Communications – messages you send us through the contact form or by email, and records of the emails the Platform sends you (recipient, type, time and delivery status).
• Technical data – IP address, browser and device information and server and security logs created when you use the Platform.

3. Why we process it and on what legal basis

• Providing the Platform – creating and managing your account, running campaigns, sending reports, alerts and service emails, and support: performance of a contract (Art. 6(1)(b) GDPR).
• Payments and invoicing – processing purchases, issuing and keeping invoices: performance of a contract and compliance with legal obligations under the Accounting Act and tax laws (Art. 6(1)(b) and (c)).
• Security and fraud prevention – protecting accounts and the Platform, preventing abuse and payment fraud: our legitimate interests (Art. 6(1)(f)).
• Improving the Platform – analysing usage in aggregated form and fixing errors: our legitimate interests (Art. 6(1)(f)).
• Answering enquiries – replying to messages you send us: steps at your request before entering a contract or our legitimate interests (Art. 6(1)(b) or (f)).
• Legal claims – establishing, exercising or defending legal claims: our legitimate interests (Art. 6(1)(f)).
• Marketing – we send marketing messages only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Personal data in campaign results

Campaigns collect publicly available web content, which may include personal data such as names, business email addresses and phone numbers. For this data the customer who runs the campaign is the controller and we act as a processor on their behalf, as described in section 8 of the Terms and Conditions. We do not use campaign results for our own purposes.

If your details appear in a customer's results and you want to exercise your rights, please contact that customer. If you do not know who it is, write to us and we will forward your request.

5. Artificial intelligence and automated processing

Some features send content to AI services: Legal Monitor and Content Monitor send titles and texts of monitored publications and pages to Google's Gemini API to select relevant items and summarise changes, and LLM Mentions sends the prompts you define to AI models. We do not send your account data for this purpose, and we do not make decisions that produce legal or similarly significant effects on you based solely on automated processing (Art. 22 GDPR).

6. Recipients and sub-processors

We share personal data only as far as necessary with:

• Google (Google Ireland Limited / Google LLC) – Google sign-in, the Gemini API and email delivery;
• Search engine, SEO and AI data providers – search results, backlink data and AI assistant answers for SERP Tracker, Lead Generator, Backlinks Search and LLM Mentions (keywords, locations, domains and the questions you define);
• Viva Payment Services S.A. (Greece) and Stripe Payments Europe, Ltd. (Ireland) – payment processing, as independent controllers for the payment data they collect;
• our hosting and infrastructure providers;
• our accountants – invoices and accounting records;
• public authorities – when required by law.

We do not sell personal data.

7. Transfers outside the EEA

Some providers may process data outside the European Economic Area. In such cases the transfer is based on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified companies) or on the Standard Contractual Clauses approved by the European Commission.

8. How long we keep data

• Account and usage data – while your account is active. After it is closed we delete or anonymise it within 90 days, except for data we must keep by law or need for legal claims.
• Campaign results – until you delete them or your account is closed.
• Invoices and accounting records – for the periods required by the Accounting Act and tax laws (up to 10 years).
• Contact enquiries – up to 2 years after the last communication.
• Server and security logs – up to 12 months, unless needed to investigate an incident.

9. Security

We use technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access control, separation of customer data and protections against misuse of the Platform. No system is completely secure; if a personal data breach is likely to put your rights at risk, we will inform you and the supervisory authority as required by the GDPR.

10. Cookies and local storage

The Platform uses only what is strictly necessary for it to work: a session cookie keeps you signed in, your browser's local storage remembers display preferences (for example which sections you have opened), and when you arrive through an affiliate link a referral cookie remembers that link for up to 60 days, so the partner who recommended us can be credited. If you use Google or Apple sign-in, they set their own cookies under their privacy policies. We do not use advertising or analytics cookies.

11. Your rights

You have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format, object to processing based on legitimate interests and withdraw consent at any time. To exercise these rights, contact us at info@tool1.app, phone +359 879 151150; we will answer within one month.

You also have the right to lodge a complaint with the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg, or with the supervisory authority of your EU country of residence.

12. Children

The Platform is not intended for persons under 18 and we do not knowingly collect their data.

13. Changes

We may update this policy. We will inform you of material changes by email or in the Platform. The date at the top shows when it was last updated.

14. Contact

TULAN LTD., UIC 205830754, 1618, Ilcho Dimitrov 7a str., Sofia, Bulgaria

Email: info@tool1.app · Phone: +359 879 151150