Data controller
The data controller is Wooscrape, a French sole proprietorship under the micro-enterprise regime operating the ScrapeWoo service.
- 78 avenue des Champs-Élysées, 75008 Paris, France
- support@scrapewoo.com
Data we process
Depending on how you use the service, we may process:
- account data such as your email address, name, avatar and technical identifiers;
- store URLs you submit, selected categories and products, and extraction settings;
- public data retrieved at your request, exported files and extraction job information;
- subscription and billing information. Full payment card details are processed by Stripe and are not stored by ScrapeWoo;
- support messages, technical logs, security data and technical preferences needed to run the service;
- aggregated audience measurement data and essential product usage events, without email addresses or submitted store URLs.
ScrapeWoo browser extension
When you deliberately open the extension on a tab, it reads that tab’s URL to identify the store you want to analyze. It does not read your browsing history and does not run continuously on other websites. The selected URL and export settings are sent to ScrapeWoo only to provide the analysis and export you requested.
After sign-in, the extension stores a time-limited ScrapeWoo access token locally in Chrome. It does not read your password or browser session cookies. You can remove the token by disconnecting the extension or uninstalling it.
Purposes and legal bases
- Performance of a contract: creating and securing your account, running extractions, producing exports, managing subscriptions and providing support.
- Legitimate interests: preventing abuse, securing and diagnosing the service, answering requests and improving reliability.
- Legal obligations: keeping documents required for accounting, billing and compliance.
- Legitimate interests: measuring cookieless audience data and understanding essential feature usage to improve the service.
Third-party catalog data
ScrapeWoo processes public catalog data you choose to analyze to provide the requested service. Some features may include public information linked to a product, such as a displayed review author name. You determine the source store, purpose of extraction and use of the resulting file. You must have a lawful basis and respect applicable rights before reuse.
Recipients and service providers
Data is accessible only to authorized people at Wooscrape and providers required to operate the service, within the scope of their tasks:
- Vercel for website hosting and delivery;
- Supabase for authentication, database services and file storage;
- Stripe for payments and subscriptions;
- Resend for transactional email;
- Umami for cookieless audience measurement;
- PostHog for server-side measurement of essential product events;
- Sentry, when enabled, to diagnose errors and technical incidents.
We may also disclose certain data when required by law or to defend our rights.
Transfers outside the European Economic Area
Some providers may process data from countries outside the European Economic Area, including the United States. Where required, transfers rely on a mechanism recognized by applicable law, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, supplemented by additional safeguards where necessary.
Retention periods
- Account data is kept for the contractual relationship and then as long as needed for requests, disputes and legal obligations.
- Export files remain available for the period included in your plan: 14 days on the free plan and 30 days on paid plans, unless deleted earlier or a contrary legal requirement applies.
- Job, usage and security information is retained for a period proportionate to monitoring, support, abuse prevention and evidentiary needs.
- Accounting and billing documents are kept for the periods required by applicable regulations.
- Audience and product usage data is kept only for a period proportionate to improving and monitoring the service.
Your rights
Depending on your circumstances, you may request access, correction, deletion, restriction or portability of your data, and object to certain processing. Where processing relies on consent, you may withdraw it without affecting processing already carried out.
To exercise your rights, email support@scrapewoo.com. We may request reasonable evidence where needed to verify your identity. You may also lodge a complaint with the French data protection authority, the CNIL.
Security
We apply technical and organizational measures designed to reduce the risk of unauthorized access, loss, alteration or disclosure. No system can provide absolute security, so these measures evolve with the service’s risks and features.
Changes to this policy
This policy may change to reflect updates to the service, our providers or applicable rules. The date at the top shows the latest update. A separate notice may be displayed in the service for material changes.