Privacy Policy

Privacy Policy

This policy describes how we collect, use, and protect your personal information.

Last updated: November 14, 2025 • Contact: [email protected]

1. Information We Collect

We collect information you provide directly: account details (name, email, password), billing information (processed by Stripe), and content you submit (URLs, metadata, images). We automatically collect: usage data (features used, API calls, render requests), technical data (IP address, browser type, device information), and performance data (crawl duration, render times, error logs). Cookies and similar technologies help us maintain sessions and analyze usage patterns.

2. How We Use Your Information

We use your data to: (a) provide and maintain the service; (b) process transactions and send receipts; (c) send service-related communications; (d) monitor and improve platform performance; (e) detect and prevent fraud or abuse; (f) comply with legal obligations; (g) send marketing communications (opt-in only). We do not sell your personal information to third parties.

3. Information Sharing

We share data only when necessary: (a) Service providers (Stripe for payments, hosting providers for infrastructure) under strict data processing agreements; (b) Legal requirements (court orders, subpoenas, regulatory requests); (c) Business transfers (mergers, acquisitions, asset sales); (d) With your consent for specific purposes. All third parties are contractually obligated to protect your data.

4. Data Retention

We retain data as follows: (a) Account data: until account deletion plus 30 days; (b) Generated images and crawl reports: 1 year by default, configurable in settings; (c) Billing records: 7 years for tax/regulatory compliance; (d) Support communications: 12 months after resolution; (e) Logs and analytics: 90 days. You can request early deletion via your dashboard or by contacting [email protected].

5. Data Security

We implement industry-standard security measures: encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, access controls and authentication, automated backup systems, and incident response procedures. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to: (a) Access your personal data; (b) Correct inaccurate data; (c) Delete your data (subject to legal retention requirements); (d) Export your data in a portable format; (e) Opt out of marketing communications; (f) Object to certain processing activities; (g) Lodge a complaint with a supervisory authority. Contact [email protected] to exercise these rights.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through: standard contractual clauses, data processing agreements with third parties, and compliance with applicable data protection laws (GDPR, CCPA, etc.).

8. Children's Privacy

Metakit is not intended for users under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately at [email protected] and we will delete it.

9. Cookies and Tracking

We use essential cookies (authentication, security), functional cookies (preferences, settings), and analytics cookies (usage patterns, performance metrics). You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

10. California Privacy Rights (CCPA)

California residents have additional rights: (a) Know what personal information is collected; (b) Know if personal information is sold or disclosed; (c) Opt out of the sale of personal information (we do not sell data); (d) Request deletion of personal information; (e) Non-discrimination for exercising privacy rights. Contact [email protected] to exercise these rights.

11. European Privacy Rights (GDPR)

EU/EEA residents have rights under GDPR including: data portability, right to be forgotten, right to restrict processing, and right to object. Our legal basis for processing: (a) Contract performance; (b) Legal obligations; (c) Legitimate interests; (d) Your consent (withdrawable anytime). Contact [email protected] or our EU representative.

12. Changes to This Policy

We may update this privacy policy periodically. Material changes will be notified via email or dashboard notification at least 30 days before taking effect. Continued use after changes constitutes acceptance. Review the "Last updated" date at the top to see when changes were made.

13. Contact Us

For privacy questions, data requests, or concerns, contact: Email: [email protected]. For general inquiries: [email protected]. We will respond to requests within 30 days.

Questions about privacy? Contact [email protected]