Legal
Privacy policy
What we collect about you as a customer, who else processes it, how long we keep it, and what you can ask us to do about it.
Last updated 2026-09-05
1Who this is about
TrueScrape is operated by Omit System, trading as TrueScrape, a sole proprietorship operating from India. This policy covers data about customers and visitors — the people who use this website, hold an API key, or pay us.
If you are here because your public social media profile or post appeared in an API response, that is a different relationship and it has its own document: the public data notice.
2What we collect
- Account. Your email address and the sign-in provider you chose. Sign-in is handled by Google Firebase; we receive your email address and a provider identifier.
- Usage. For each API request: the endpoint called, the parameters, the time, the response status, the credits charged, and bytes transferred. This is what makes your usage page and your invoice possible, and what lets us refund a request that failed.
- Payments. We do not receive or store your card details. Payments are processed by Lemon Squeezy as Merchant of Record; we receive the fact of a purchase, its amount, and an order identifier.
- Product analytics. Page and feature events, and error reports, via PostHog. Anonymous visitors on the marketing pages are counted without a persistent identifier.
We do not ask for, and have no use for, special-category data — health, religion, political opinions, biometrics or anything comparable.
3Why we are allowed to
- To perform our contract with you — running your account, executing the requests you make, charging for them, and refunding what failed.
- Legitimate interests — keeping the service secure and available, preventing abuse, and understanding which features are used.
- Legal obligation — keeping records of payments for as long as tax and accounting rules require.
4Who else processes it
Everyone below acts on our instructions. This is the complete list; there is no unnamed “trusted partners” category.
- Lemon Squeezy — Payments and invoicing, as Merchant of Record. Processes in United States.
- Google Firebase — Account sign-in and email verification. Processes in United States.
- Resend — Transactional email — receipts, credit notices. Processes in United States.
- PostHog — Product analytics and error reporting. Processes in European Union.
- Vercel — Website hosting. Processes in United States.
- Contabo — API and database hosting. Processes in Germany.
- Geonode — Residential proxy egress for public page fetches. Processes in United States and elsewhere.
Several are outside India. Where data reaches them it travels under the contractual protections each provides, and only for the purpose named. We do not sell your data, and we do not share it for anyone else’s advertising.
5How long we keep it
- Account data — while your account exists, and then as long as needed to settle anything outstanding.
- Request logs — retained so that usage and billing can be audited and disputes resolved.
- Cached API responses — expire on the cache lifetime published for each endpoint in
/openapi.json. The cache exists to avoid re-requesting a source, not to accumulate a store. - Payment records — as long as tax and accounting law requires.
Accounts can be set to zero retention, in which case media fetched on your behalf is discarded rather than stored. Ask us if you need this.
6Your rights
You can ask us to give you a copy of your data, correct it, delete it, or stop a particular use of it. Write to privacy@truescrape.com and we will respond within 30 days.
If you are in the EU or UK you also have the right to complain to your data protection authority. If you are in India, the Digital Personal Data Protection Act gives you equivalent rights and a route to the Data Protection Board.
Deleting your account removes your ability to call the API. Records we must keep for tax purposes, and log entries needed to resolve a billing dispute already in progress, survive that deletion for as long as the obligation does.
7Security
API keys are stored only as a SHA-256 hash — we cannot show you an existing key, only issue a new one. Traffic is encrypted in transit. Access to production systems is limited to the proprietor.
8Changes
If this policy changes in a way that affects you, the date at the top changes and material changes are noted in the changelog.
Contact
Privacy and data requests: privacy@truescrape.com
Billing and everything else: support@truescrape.com
The other documents