Skip to content
Request access
Legal

Privacy Policy

Last updated: July 12, 2026

Who we are

recrawl (at recrawl.co) is operated by PT Crawl Compass Indonesia ("Crawl Compass"), an SEO services agency based in Jakarta, Indonesia. recrawl is the analytics tool Crawl Compass uses to deliver SEO services to its clients. This policy explains how recrawl accesses, uses, stores, and shares your data, including data we receive from Google APIs.

What data we collect

  • Account information: your name, email address, and, when using email and password sign-in, a scrypt-hashed password. This is the minimum needed to identify you when you sign in.
  • Session data: when you sign in we set a session cookie scoped only to the recrawl domain. The session record (IP address, user agent, last activity) is stored in our Postgres database for 7 days, then automatically expires.
  • Google sign-in (optional): if you click Continue with Google we request the basic scopes openid email profile only, to confirm your email matches an existing invite. We do not request access to Gmail, Drive, Calendar, or any other Google service through sign-in.
  • Google Search Console and Google Analytics 4 (optional, per client): if you connect your GSC and GA4 properties, we request the read-only scopes webmasters.readonly and analytics.readonly to display your search performance and traffic inside your dashboard. Refresh tokens are encrypted at rest with AES-256-GCM, never leave our servers, and can be revoked at any time.
  • Google Business Profile (optional, per client): if you connect a Google Business Profile, we request the business.manage scope, used only to read and manage the business listings you own or are explicitly authorized to manage, so we can show and update your local presence (profile details, posts, reviews, and performance insights) inside your dashboard. We do not use it for competitor-listing data harvesting, lead generation, or automated review generation. Refresh tokens are encrypted at rest and can be revoked at any time.

Google API Services: Limited Use

recrawl's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the analytics features you connect. We do not transfer this data to others except as necessary to provide or improve those features, to comply with law, or as part of a merger or acquisition. We do not use it for advertising, and no humans read it except where you give consent, for security purposes, to comply with law, or in aggregated and anonymized form.

How we use your data

  • To let you sign in to the dashboard.
  • To display your SEO performance metrics (rankings, traffic, AI visibility, performance, and local presence).
  • To generate the reports our team uses during client review meetings.
  • To detect and prevent unauthorized access (rate limiting and audit logging).

What we do not do

  • We do not sell your data.
  • We do not use your data for advertising.
  • We do not use your Google data to train AI or machine-learning models.
  • We do not send your data to third-party SaaS analytics platforms (no Hotjar, Mixpanel, or Segment).

Where your data lives

Our infrastructure is a dedicated server in Singapore. Encrypted offsite backups use client-side AES-256 encryption with object-lock retention. Data stays within the Singapore region, except for transit through Cloudflare's global network for performance and security.

Retention

  • Session records: automatically deleted after 7 days of inactivity.
  • Audit log (sign-in events, OAuth grants, security actions): retained 90 days, plus a 2-year cold archive.
  • Connected-source snapshots (GSC, GA4, Business Profile): retained for the lifetime of the client relationship, and deleted within 30 days of contract termination.
  • OAuth refresh tokens: deleted within 30 days of contract termination, or immediately if you revoke access at Google.

Your rights

You can request a copy of your data, request deletion, or revoke access at any time by emailing hello@crawlcompass.com. We respond within 30 days. You can also revoke Google access directly from your Google account's security settings.

Changes to this policy

If we change how we handle your data, we will update this page and revise the date above. Material changes will be communicated to connected clients.

Contact

PT Crawl Compass Indonesia, hello@crawlcompass.com, Jakarta, Indonesia.