Privacy Policy

We collect personal data directly from you, automatically from your use of the services, and from third parties involved in providing the services (such as payment and communications providers). Where we process data from client-specified targets under client instructions, that processing is described in the “Scraping data: controller vs processor” section.

Some request, target, and operational data may not itself be personal data; however, this data may include personal data depending on the request and content provided.

We process personal data to:

• Provide and operate our services (accounts, requests, deliveries).
• Communicate with you (verification, password reset, notifications, support).
• Process payments and issue invoices/receipts.
• Prevent fraud, abuse, and security incidents.
• Comply with legal obligations (accounting, tax, anti-fraud, legal requests).
• Administer temporary share/download links and maintain access logs for delivery, security, and audit purposes.
• Improve our services (analytics, debugging), where enabled.

We may also refuse, suspend, or limit our services if required information is missing or cannot be verified, including where this is necessary for billing, fraud prevention, security, or compliance with applicable law.

Providing certain personal data is necessary to provide our services (for example, account and billing details). If you choose not to provide required information, we may be unable to create an account, process your request, or provide deliverables. Where we request data to comply with a legal obligation (for example invoicing/tax), failure to provide it may prevent us from providing our services.

We rely on the following legal bases under GDPR, depending on the context:

• Contract: to provide the services you request and manage your account.
• Legal obligation: accounting/tax recordkeeping and compliance.
• Legitimate interests: security, fraud prevention, and service improvement.
• Consent: for non-essential cookies/analytics/marketing (where used).

This Privacy Policy applies where Mara Digiserv SRL acts as a data controller (as defined by applicable privacy laws), including for our website operations, lead and inquiry handling, account administration, and security logging.

When we perform scraping on behalf of a client, the client typically decides the purpose and scope and is the data controller (as defined by applicable privacy laws). In that processing, Mara Digiserv SRL acts as a data processor, while remaining a data controller for our own business operations, such as account administration, billing, security logging, and legal compliance.

When we act as a data processor for a client's scraping job, the client's own privacy notices and policies apply to the client's collection and use of scraped data. The client is responsible for ensuring it has a lawful basis and providing any required notices, consents, or other disclosures to data subjects.

We use essential cookies and similar technologies to operate the website and dashboard (for example, session and security cookies). Our infrastructure and security providers may set additional cookies for security, reliability, and abuse prevention where strictly necessary.

You can control cookies through your browser settings. Disabling cookies may prevent parts of our services (such as login and forms) from working properly.

More details about the cookies and similar technologies we use are provided in our Cookies Policy.

We share personal data only as needed to provide our services, with categories of recipients such as:

• Hosting, infrastructure, and deployment providers (to run and operate our services).
• DNS, CDN, and security providers (traffic routing, performance, and abuse prevention).
• File storage providers (for uploaded files and deliverables).
• Email and communications providers (transactional and support communications).
• Payment processors and banking partners (to process payments and prevent fraud).
• Professional advisers (including legal and accounting) and authorities where required by law.

We require appropriate contractual safeguards with processors where applicable.

We may also disclose personal data where necessary to establish, exercise, or defend legal claims.

We keep personal data only as long as necessary for the purposes described in this Privacy Policy, including legal, accounting, security, and operational requirements. Retention periods can vary based on configuration and contractual needs.

• Logs and audit records are retained for security and operational purposes.
• Project files and outputs may be retained for delivery, re-download, support, and billing, then deleted according to our retention practices and contractual requirements.
• Temporary share/download links are short-lived by design, and related access logs may be retained for security and audit purposes.
• Email delivery logs may be retained to troubleshoot transactional communications and maintain delivery records.
• Billing records may be retained longer where required by law.

We use technical and organizational measures appropriate to the risk, such as access controls, authentication, audit logging, and encrypted transport (HTTPS).

No method of transmission or storage is 100% secure. If you suspect unauthorized access, contact us.

Depending on the circumstances, you may have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data where applicable
• Restrict processing
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].