Privacy Policy

1. Who we are

Kaupr Limited (“Kaupr”, “we”) is the controller of personal data collected via the Kaupr service. We are incorporated in England and Wales (London). For data-protection enquiries, contact privacy@kaupr.com.

2. What Kaupr is

Kaupr is the Commercial Observatory of the Internet. We continuously crawl and monitor publicly available signals from commercial domains across the web — technology stack, infrastructure, payment methods, hiring patterns, founder information, and commercial trajectory signals. We preserve this data as an immutable, timestamped record and surface it as intelligence to subscribers and free-tier users.

Kaupr observes any commercial entity with a web presence — not limited to any platform, industry, or geography. We do not operate a consumer-facing marketplace or shopping product.

3. Data we collect about you

• Email address — your account identifier. Used to send sign-in links, weekly intelligence briefs, and product notifications.
• Monitored domains — the domains you choose to monitor for intelligence alerts.
• Plan and billing status — your subscription tier and Stripe customer ID. We do not store card data; Stripe is the controller of payment instruments.
• Account activity — login events, domain lookups, API usage. Used for security, support, and product improvement.

4. Public commercial data we crawl

We crawl publicly available information from commercial websites: technology signals, DNS and infrastructure records, job listings, pricing data, social presence, and organisational information. This data is sourced from public HTTP responses, certificate transparency logs, public job board APIs, company registries, and open datasets including Common Crawl.

We do not access anything behind authentication. We respect robots.txt directives. We do not collect consumer personal data from the sites we crawl — our signals concern the commercial entity, not its customers. See our crawler disclosure for full details.

5. Legal basis (GDPR)

• Contract — processing necessary to deliver the service you signed up for.
• Legitimate interests — security logging, fraud prevention, and product analytics. Our legitimate interest in building a public commercial intelligence record is balanced against the rights of the entities we observe, who have made this information publicly available.
• Consent — analytics cookies and marketing emails, where we request consent separately.

6. Data sharing

We share data with:

• Stripe — payment processing
• Resend — transactional email delivery
• OVH — cloud infrastructure (EU-based)

We do not sell your data. We do not share it with advertisers.

7. Data about commercial entities

If you are a representative of a company whose signals appear in the Kaupr observatory and wish to correct or remove that data, submit a request at kaupr.com/merchants/removal. We will review all requests within 30 days.

8. Retention

• Account data is retained while your account is active and for 90 days after deletion.
• Billing records are retained for 7 years for tax compliance.
• Observatory records (crawled commercial signals) are retained indefinitely as part of the immutable historical record. Removal requests are handled under section 7.

9. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. Contact privacy@kaupr.com. You also have the right to lodge a complaint with your national data protection authority.

10. Cookies

We use one session cookie to maintain your logged-in state. We do not use third-party tracking cookies. Analytics (if enabled) use anonymised, aggregated data via our own infrastructure — no data is sent to Google Analytics or similar.

11. Changes

We will notify registered users by email of material changes to this policy at least 14 days before they take effect.