Privacy Policy

Information we collect

When you create an account, we collect:

• Email address: used for sign-in, password resets, and important service notices.
• Password (hashed with bcrypt — we never see the plaintext).
• Optional profile information you provide (name, timezone).

When you use the API, we also collect and store:

• The URLs you submit and the request options accompanying them.
• The result we return to you, kept for your dashboard's request history.
• Operational metadata: timing, success/failure, IP address of the calling client, user-agent.

When you sign in to the dashboard, we store a session record (IP address, browser, country) so you can review and revoke active sessions.

How we use your information

We use the information we collect to:

• Operate the Service: authenticate you, route requests, return results, and bill the right plan.
• Show you your usage and request history in the dashboard.
• Enforce per-organization monthly quotas.
• Send transactional emails (sign-in, password reset, plan or quota notices).
• Investigate abuse, security incidents, and bugs.

We do not sell, rent, or share your personal information with third parties, except as needed to operate the Service (see "Third-party providers" below) or when required by law.

Data we fetch from third-party URLs

When you submit a URL, our infrastructure fetches and renders that page — possibly executing its JavaScript — and stores the result against your project so you can read it back from the dashboard. We treat that data as yours; we do not use it to train models, and we do not share it with anyone outside the providers needed to deliver the Service to you.

Where your data is stored

Account data, request history, and operational logs are hosted on infrastructure located in the European Union. Deleted projects and accounts are removed promptly, on a schedule that allows for routine backup rotation.

Third-party providers

We use a small number of third parties to operate URLpipe. Each only receives the data needed to perform its function and is contractually bound to protect it:

• Anthropic and OpenAI — process page content for AI endpoints (/markdown, /meta, /summarize, /keywords). Content is sent over TLS and is not retained by the provider for training under their API terms.
• Browserless — runs the headless Chrome instances we use to render pages.
• SMTP2GO — transactional email delivery.
• Hosting and storage providers — run the application and persist your account and request data.

Cookies

We use cookies strictly necessary to keep you signed in and to protect against cross-site request forgery. We do not use advertising or third-party tracking cookies.

Data security

We take reasonable technical and organizational measures to protect your information — TLS everywhere, hashed passwords, least-privilege internal access. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Your rights

Subject to applicable law (including the EU General Data Protection Regulation), you have the right to:

• Access, update, or delete your personal information from your account, or by contacting us.
• Object to or restrict certain processing of your personal information.
• Receive a copy of your personal information in a portable format.
• Lodge a complaint with your local data protection authority.

You can delete your account and its request history at any time from your account settings.

Children's privacy

URLpipe is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently done so, we will delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notification. The effective date at the top of this page will always reflect the latest version.

Contact

Questions about this Privacy Policy or your data? Email privacy@urlpipe.dev.