Data Processing & Security Policy

1. Introduction

This Data Processing & Security Policy ("Policy") describes how NGOFeed Digital Solution Private Limited ("Company," "we," "our," or "us") processes, stores, protects, and manages data through CrawlSage, our AI-powered SEO auditing and website optimization platform.

This Policy should be read together with our Privacy Policy, Terms of Service, and other applicable legal policies.

2. Company Information

NGOFeed Digital Solution Private Limited

Product: CrawlSage

Website: https://crawlsage.com

Support Email: support@crawlsage.com

Legal Email: legal@crawlsage.com

Corporate Identification Number (CIN): U62099DL2024PTC435623

GSTIN: 07AAJCN8222D1ZK

Registered Office:

HNO-L-4, 1st Floor, Gaffar Manzil Part 2, Jamia Nagar, New Delhi, South Delhi – 110025, Delhi, India

3. Scope

This Policy applies to data processed through CrawlSage, including:

User account information
Website URLs submitted for analysis
Crawl results
SEO audit reports
Technical website data
AI-generated recommendations
Billing records
Customer support communications
Platform usage information
System logs generated as part of operating and securing the Services

4. Data Processing Principles

The Company processes information in accordance with the following principles:

Lawfulness
Fairness
Transparency
Purpose limitation
Data minimization
Accuracy
Storage limitation
Integrity
Confidentiality
Accountability

We process personal information only where there is an appropriate legal basis under applicable law.

5. Information We Process

Depending on how you use the Services, we may process:

Account Information

Name
Email address
Company information
Account preferences
Subscription details

Website Analysis Data

Website URLs
Sitemap URLs
Public website content required for analysis
Technical SEO metadata
Structured data
Crawl results
Performance metrics
SEO reports

Operational Data

Login activity
Browser information
Device information
IP address
Error logs
Security logs
Usage statistics

6. Purpose of Processing

We process information to:

Deliver the Services.
Perform SEO audits.
Generate AI-powered insights.
Maintain user accounts.
Process subscriptions and payments.
Improve platform functionality.
Detect abuse and fraud.
Protect platform security.
Respond to support requests.
Comply with legal obligations.

We do not process personal information for purposes that are incompatible with those described in our Privacy Policy unless permitted by law or with appropriate notice.

7. Security Measures

The Company implements reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, or destruction.

Depending on the Services and infrastructure, security measures may include:

Encryption of data in transit using industry-standard protocols where supported.
Authentication and authorization controls.
Role-based access management where applicable.
Secure password storage.
Infrastructure monitoring.
Audit logging.
Security updates and patch management.
Access restrictions for authorized personnel.

No system can guarantee absolute security, and users should also take appropriate steps to protect their accounts and devices.

8. Access Control

Access to customer information is limited to authorized personnel and service providers who require access to perform their responsibilities.

Access permissions are granted according to business needs and may be reviewed or revoked when no longer required.

9. Third-Party Service Providers

To operate the Services, the Company may use trusted third-party providers for functions such as:

Cloud hosting
Payment processing
Email delivery
Authentication
Analytics
Customer support
Artificial intelligence services

Where appropriate, the Company seeks to ensure that such providers are contractually required to protect information in accordance with applicable legal and contractual obligations.

10. Data Retention

Information is retained only for as long as reasonably necessary to:

Provide the Services.
Maintain user accounts.
Meet legal and regulatory obligations.
Resolve disputes.
Enforce agreements.
Protect platform security.

When information is no longer required, it may be deleted, anonymized, or otherwise securely disposed of in accordance with the Company's retention practices.

11. Backup and Business Continuity

The Company may maintain backup and recovery procedures designed to support service continuity and protect against accidental data loss.

Backup practices, schedules, and retention periods may change over time as operational requirements evolve.

12. Security Incident Response

If the Company becomes aware of a security incident affecting information processed through the Services, we will take reasonable steps to:

Investigate the incident.
Contain and mitigate potential impacts.
Restore affected systems where appropriate.
Comply with applicable legal notification obligations.

Where required by law, affected users and relevant authorities will be notified within the applicable legal timeframe.

13. Customer Responsibilities

Users are responsible for:

Maintaining secure passwords.
Protecting account credentials.
Using multi-factor authentication where available.
Keeping devices secure.
Ensuring submitted websites and data may lawfully be processed.
Promptly reporting suspected unauthorized access.

Security is a shared responsibility between the Company and its users.

14. International Data Processing

Information may be processed or stored in jurisdictions outside the user's country of residence where necessary to provide the Services.

Where required by applicable law, the Company will implement appropriate safeguards for cross-border data transfers.

15. Changes to This Policy

The Company may revise this Policy from time to time to reflect operational, legal, technological, or regulatory changes.

Material updates will be reflected by updating the Last Updated date.

Continued use of the Services after the effective date of an updated Policy constitutes acceptance of the revised version.

16. Contact Us

If you have questions regarding this Data Processing & Security Policy or our information security practices, please contact: