Privacy Policy

Last updated: May 7, 2026

1. Information We Collect

When you use Extractly, we collect the following information:

Account Information: Your name, email address, and profile picture from Google OAuth when you sign in.
Usage Data: URLs you submit for extraction, templates you create, extraction results, and API usage metrics.
Payment Information: Processed securely by Paddle. We do not store full credit card details.
Technical Data: IP address, browser type, device information, and page interaction data collected via Google Analytics.

2. How We Use Your Information

To provide, maintain, and improve the Service
To process extraction requests and deliver results
To manage your account, credits, and subscription
To communicate about service updates, billing, and support
To analyze usage patterns and improve our AI models
To comply with legal obligations

3. Data Storage and Security

Your data is stored on Supabase (database), a SOC 2 compliant provider with encryption at rest and in transit. Extraction results are retained for your access. We implement reasonable security measures including encryption, access controls, and regular security reviews. No method of transmission over the Internet is 100% secure.

4. Third-Party Services

We share data with the following third parties to operate the Service:

Google: OAuth authentication, Google Sheets export, and Google Analytics.
Supabase: Database hosting for user accounts and extraction data.
Paddle: Payment processing (merchant of record). Paddle handles all payment data.
AI Providers (Gemini, OpenAI, Anthropic): Processing extraction requests. Website content you submit is processed through these providers.

5. Cookies

We use essential cookies for authentication (via NextAuth.js) and Google Analytics cookies for usage analytics. You can control cookie preferences through your browser settings. Disabling cookies may limit functionality.

6. Data Retention

We retain your account information and extraction data for as long as your account is active. Upon account deletion, your personal data is removed within 30 days. Aggregated and anonymized data may be retained for analytical purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access, correct, or delete your personal data
Export your data in a portable format
Object to or restrict processing of your data
Withdraw consent where processing is based on consent
Lodge a complaint with your local data protection authority

To exercise these rights, contact us at ranausman@outlook.com.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children.

9. International Transfers

Your data may be processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact us at ranausman@outlook.com.