1. Who we are
Crawley is operated by Novi, a UK-based digital marketing agency, contactable at hello@novi.digital. We are the data controller for the personal data described below.
2. What we collect
- Account data: your name, company name, and email address, used to log you in and send crawl notifications.
- Site & crawl data: the URLs, domains, and pages you register for auditing, and the results of each crawl (scores, detected issues, page content snippets used for duplicate-content and SEO checks, and technical details like detected software/tracking tags).
- Usage data: basic log data (IP address, timestamps) when you use the dashboard, for security and troubleshooting.
3. How we use it
To run audits and generate your reports; to authenticate you and secure your account; to communicate with you about your account and crawl results; and, where you've connected Claude via your personal connector token, to let Claude answer questions about your own crawl data on your request.
4. Third-party services
We use the following third parties to provide Crawley. Each acts under its own privacy terms:
- Google PageSpeed Insights: the URL of each page you ask us to audit for speed and Core Web Vitals is sent to Google.
- Google Search Console, Google Analytics 4 and Bing Webmaster Tools: if you connect them, we read your search and traffic data through your own authorisation, and you can disconnect at any time.
- AI providers (Anthropic, Google Gemini and OpenAI): the LLM inclusion tracker sends the questions you track, and your site's domain, to these providers (with live web search) to record whether your site is cited. Crawley AI, our built-in assistant, sends your messages and the relevant parts of your results to Anthropic to answer them.
- Claude connector: if you choose to connect Crawley to your own Claude (Anthropic) account via your personal connector, your crawl data is shared with Anthropic only in response to your own queries in that conversation.
- Headless browser rendering: for JavaScript-heavy pages, the page URL is sent to a rendering service so we can read the page as a visitor would.
- Stripe: processes subscription and credit payments. We do not store your card details.
- Mailgun (EU): delivers login links and notification emails.
5. Data retention
We keep your crawl history for as long as your account is active, so you can track progress over time. You can ask us to delete your account and associated data at any time by emailing hello@novi.digital.
6. Data security
Access to the dashboard and connector tools is protected by authentication tokens and session-based login. We recommend rotating your personal connector token if you believe it's been exposed (available from your account settings).
7. Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. Contact hello@novi.digital to exercise these rights.
8. Changes
We may update this policy from time to time; we'll post the updated version here with a new "last updated" date.
9. Contact
hello@novi.digital
