Who operates ProtoScrape
ProtoScrape is operated by KHERROUBI Abdelkader, 11 Rue Auguste Pégurier, apt 402, 06200 Nice, France. For privacy questions and requests, email ha9kou@gmail.com or use Support in your workspace.
Data and purposes
- Account and access: your email, authentication records, API-key identifiers and account settings let us sign you in and secure your account. Authentication is handled by Google Firebase. We store API-key hashes; complete keys are displayed only when created.
- Requests and results: we process your query, engine, locale, job status and returned results to deliver the service you request. Queries are sent to the selected search or AI service. Do not submit passwords, payment details, sensitive personal information or confidential information you are not authorized to share.
- Usage and billing: credit reservations, charges, releases, subscription and invoice identifiers support accounting, customer billing and dispute handling. Stripe hosts payment entry and processes payment-method details. ProtoScrape does not store full card numbers or card security codes.
- Security and support: request identifiers, timestamps, service errors and information you provide in support requests help investigate problems, prevent abuse and answer requests. Infrastructure providers may process IP addresses and browser information needed to deliver and protect the service.
- Optional analytics: public website measurement starts only after you allow it. See the analytics notice. Workspace queries, results and billing data are excluded from our website analytics integration.
Legal bases
We process account, request and billing data to perform our agreement with you; accounting records to meet applicable legal obligations; and proportionate security, fraud-prevention and service-diagnostic data for our legitimate interests in operating a reliable service. Optional analytics relies on consent, which you can withdraw in Analytics settings. Required account and request data are necessary to provide the service.
Recipients and international processing
Our service providers include Google Cloud and Firebase for hosting and authentication, Stripe for payments, and Google Analytics when enabled. Selected search and AI services receive the queries needed to produce your results and process them under their own applicable terms. We do not sell account information or use submitted queries for advertising.
Production application workloads are hosted in Google Cloud's US Central region. Providers may also process data in other countries, including the United States. Applicable provider agreements govern their processing and international-transfer safeguards. Contact us for information about the safeguards relevant to your use. If your organization requires a data-processing agreement or specific residency commitments, contact us before submitting personal data; no custom residency commitment is included in self-service plans.
Retention and deletion
Jobs, query text and results are scheduled for deletion seven days after creation. Deletion runs asynchronously, so removal may occur later. Idempotency records expire after 30 days; short-lived rate counters expire after two minutes. Database recovery history may retain previous versions for up to seven days after deletion. Download results you need to retain.
Account and API-key records remain while your account is open. Billing events and credit ledgers are retained for accounting, fraud prevention and dispute requirements; they currently have no automatic deletion. Support records are retained while a request is open and reviewed for deletion within one year after closure, unless an applicable legal obligation or dispute requires longer retention. Operational logs follow the configured cloud log retention. Contact us for the retention applicable to a particular record.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You can withdraw analytics consent without affecting earlier processing. We may ask for proportionate proof of identity and explain any records we must retain. We do not use automated decision-making to make legal or similarly significant decisions about you.
You may complain to the French data-protection authority, CNIL, or your relevant local authority. Contact us first if you would like help resolving a concern.
Changes
The date above identifies this notice. We will publish updates here and communicate material changes affecting existing accounts through the service or account contact.