On this page
1. Who we are
SOS Scraper is run by Tirthak, an independent developer based in India (“we”, “us”). We decide how the personal data described here is used. You can reach us about anything in this policy at hello@tirthak.in.
2. What we collect
| What | Details |
|---|---|
| Account details | Your email address, the date you signed up, your plan, credits used and limits, and your API key. If you sign in with Google, Google shares your name, email address and profile photo with our sign-in provider; we only use the email address. |
| Your password | Handled by our sign-in provider (Google Firebase). We never see or store it. |
| Call history | For every API call, including calls from the tools on the site: the endpoint, the state, what you searched for (a company name, filing ID or the filters you chose), the time, how long it took, whether it succeeded and the credits used. |
| Plan requests and payments | The plan you ask for and when, and whether and when you paid. Card and bank details are handled by the payment provider on the payment link. We don't receive or store them. |
| Abuse prevention | A one-way code (hash) of your email address, so the same inbox can't open several free accounts. When you sign up, a one-way code of your network's IP address, to limit how many accounts are opened from one network in a day. We don't store your IP address itself in our database. |
| Messages | What you write when you email us. |
We don't use advertising or analytics trackers, and we don't buy data about you. Results from the API can include information from public state records, such as company names and registered agents. That information comes from the states, not from you, and we don't add to it.
3. How we use it
- To run your account: sign you in, check your API key, count credits and apply your plan's limits.
- To answer your calls. For company lookups and name checks, we send the company name or filing ID you searched to the state's official website. We don't send who you are.
- To show you your usage on your dashboard and analytics page, and to check that every credit charged matches a call.
- To prevent abuse: one free account per person, no temporary email addresses, and limits on sign-ups and calls.
- To send you emails you need: confirming your address, resetting your password, payment links for plans you ask for, and important changes to the service or these policies. We don't send marketing emails.
- To support you when you write to us, and to fix problems.
- To improve the service, using totals such as how many calls each endpoint gets, not individual profiles.
4. Why we're allowed to
- To provide the service you signed up for: account details, call history, payments and service emails.
- Our legitimate interest in a safe, fair service: abuse prevention and security.
- Legal duties: keeping payment records as tax and accounting law requires.
- Your consent, where the law requires it. You can withdraw consent at any time by emailing us; this doesn't affect what was done before.
6. Where your data is stored
Our providers store and process data in the United States and other countries, which may be outside the country you live in. We use providers that protect data with contracts and security measures suited to that.
7. How long we keep it
- Account details and call history: while your account is open. Your history is what your dashboard and analytics show.
- After you close your account: we delete your account details and call history within 30 days.
- Payment records: as long as tax and accounting law requires.
- The code of your network's IP address used for sign-up limits: 2 days.
- The code of your email address used for the one-account rule: while your account is open, and after it's closed only as long as needed to stop the free plan being misused.
- Emails you send us: as long as needed to help you, and no longer than 2 years after the conversation ends.
8. How we protect it
- All traffic to the website and API is encrypted (HTTPS).
- Database rules let each user read only their own account and history. Only the administrator can see other accounts.
- You can replace your API key at any time from your dashboard; the old key stops working at once.
9. Your choices and rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it if it's wrong;
- delete it, by closing your account;
- stop or limit a particular use of it, or withdraw consent you gave;
- (in India) name someone to act for you if you die or can't act yourself.
Email hello@tirthak.in from the address on your account. We reply within 30 days. You can also complain to the data protection authority where you live, though we'd appreciate the chance to sort it out first.
10. Cookies and browser storage
We don't use advertising or analytics cookies. When you sign in, our sign-in provider keeps your session in your browser's storage so you stay signed in; signing out removes it. The website also loads fonts from Google Fonts.
11. Children
The service is for businesses and adults. It isn't meant for anyone under 18, and we don't knowingly collect their data.
12. Grievances
For any complaint about how your personal data is handled, contact our grievance officer, Tirthak, at hello@tirthak.in. We acknowledge complaints within 2 business days and aim to resolve them within 30 days.
13. Changes to this policy
If we change this policy in a way that matters, we'll email account holders before the change takes effect. The date at the top of this page shows when it was last changed. See also our Terms of service.
Questions
Email hello@tirthak.in. We reply within 2 business days.