The purpose of this Privacy Policy is to help you understand:

* How we collect and use your personal information
* How we share the information we collect
* How we store and secure the information we collect
* How you can access and control your information
* How we transfer information internationally
* Our policy towards children
* Data Protection Officer contact information

Where required under applicable laws, including the General Data Protection Regulation, we will obtain your consent before collecting or using your personal information.

You may withdraw your consent at any time by contacting us at: hr@anakin.company

By using our website and services, you agree to the collection and use of your personal information as described in this Privacy Policy.

Information You Provide to Us
We collect information that you provide directly when creating an account, communicating with us, or using our services.

Account Information
When you create an account with Anakin, we collect basic profile information including:
* Name
* Email address
* Profile details associated with your account

Contact Us Form Information
When you submit a request or inquiry through our contact us form, we may collect:
* Name
* Email address
* Company name
* Phone number

Billing and Payment Information
When you subscribe to paid services, we may collect billing details including:
* Billing name
* Billing address
* Tax information (if applicable)
* Payment status
Payment card details are typically handled by third-party payment processors such as Stripe.

Support and Communications
If you contact us through support channels, we may collect the information you provide, including emails, support tickets, forms, and attachments or documentation. This information helps us investigate issues and provide customer support.

Configuration and Inputs
When using our services, you may submit operational inputs including URLs, parameters, prompts, scraping configurations, request payloads, headers, and other Customer Content you submit to the platform.

Information We Collect Automatically
When you use our services, we automatically collect certain technical and operational data.

Usage and Log Data (Including URLs)
This may include request timestamps, endpoints called, URLs submitted, target domains, response status codes, error logs, and usage volumes. This data helps us monitor performance, troubleshoot issues, and improve reliability.

IP Address and Device Information
We may collect information about the devices used to access our services, including browser type, operating system, and approximate geographic location inferred from IP.

Request Payloads and Content
We may log and store request payloads submitted to our services, including request headers, parameters, and configuration inputs. Depending on the service configuration, we may temporarily store portions of retrieved content or generated output to provide the Services, maintain reliability, prevent abuse, and improve system performance.

Cookies and Similar Technologies
We use cookies and similar technologies to support the functionality of our services, including authentication, session management, user preferences, and website analytics. More information about cookies is available in our Cookie Policy.

Information From Third Parties
We may also receive information from trusted third-party providers.

Payment Processors
Payment processors provide confirmation of payment transactions and limited billing information (for example, Stripe).

Infrastructure and Analytics Providers
Operational telemetry and analytics signals may be received from infrastructure providers and monitoring systems, such as Mixpanel Product Analytics.

Business Leads
We may obtain personal data about business contacts from third-party sources, such as name, email address, job title, company, and other professional contact details, which can be used for business outreach and client onboarding purposes.

Identity Providers
If you authenticate through Single Sign-On (SSO) or OAuth integrations, we may receive basic profile details and identifiers from the identity provider. SSO providers include Google.

Scraped Data
We may collect or receive data from external sources based on user instructions when using our services. This may include data retrieved from publicly available websites, applications, or other third-party sources. Depending on the source and configuration, such data may include personal data. Anakin does not independently determine the scope of such collection and processes this data solely based on user instructions. Firecrawl may be utilized when fallback or supplemental scraping capability is required to improve reliability, resiliency, and request success rates.

The way we use the information we collect depends on which services you use, how you use those services, and the preferences or settings you have configured. We process personal information for the following purposes.

To Provide and Operate Our Services
This includes creating and managing user accounts, processing service requests and API interactions, verifying user identity and authenticating access, managing billing and subscription services, and providing customer support. For example, account information such as your name and email address is used to manage your account and communicate with you about your use of the Services. Configuration inputs, request parameters, and payloads submitted through the platform are used to execute the services requested by you.

To Maintain and Improve the Services
We use operational and usage data to improve reliability and performance, including monitoring service performance, diagnosing technical issues, improving API functionality, identifying usage patterns and trends, and developing new features and services.

Customer Support
We use information provided through support requests to investigate and resolve issues, troubleshoot service problems, respond to customer inquiries, and improve the support experience.

Security, Fraud Prevention, and Abuse Monitoring
We use technical and operational data to detect and prevent fraud, monitor for unauthorized activity, investigate suspected abuse, enforce our Terms of Service, and protect the integrity of our infrastructure.

Communication About Our Services
We may use your contact information to send service updates, security alerts, account notifications, billing reminders, and technical notices. These communications are considered necessary for the operation of the service.

Marketing and Product Updates
Where permitted by applicable law, we may send information about new product features, updates to our services, events or announcements, and surveys and feedback opportunities. You may opt out of marketing communications at any time using the unsubscribe instructions included in such communications.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data under the lawful bases defined in the General Data Protection Regulation. We rely on the following legal bases:

Performance of a Contract
Processing necessary to provide the Services you request, including account creation, API usage, billing and payment processing, and customer support.

Legitimate Interests
Processing necessary for our legitimate business interests, including improving the Services, monitoring system performance, preventing abuse and fraud, and protecting our legal rights.

Consent
Where required by law, we process personal data based on your consent, such as marketing communications and certain cookies and tracking technologies. You may withdraw consent at any time.

Legal Obligations
We may process personal data to comply with legal obligations such as tax or financial reporting requirements and regulatory compliance obligations.

We may share personal information with third parties in the following circumstances.

Service Providers
We work with third-party providers who perform services on our behalf, including cloud hosting, payment processing, infrastructure services, analytics and monitoring, and customer support tools. These providers may process personal data only as necessary to perform their services and are required to maintain appropriate confidentiality and security safeguards. Examples may include Stripe (payment processing), cloud infrastructure providers, and monitoring or analytics services.

Legal Compliance
We may disclose personal data if required to do so by law or if we believe such action is necessary to comply with legal obligations, respond to lawful requests from authorities, enforce our legal rights, or protect the safety of users or others.

Business Transfers
Personal data may be transferred in connection with mergers, acquisitions, financing transactions, sale of company assets, or bankruptcy proceedings. In such cases, personal data may be transferred as part of the business assets.

With Your Consent
We may share personal data with third parties where you have provided explicit consent for such sharing.

Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Retention periods may vary depending on the type of data and applicable legal obligations. Examples include account data retained while an account remains active, billing records retained for accounting and tax compliance, and operational logs retained for system monitoring and security purposes. Aggregate or anonymized data may be retained longer for research and service improvement.

Data Security and Protection
Anakin implements appropriate technical and organizational safeguards to protect personal data. Security measures may include encryption of data in transit (HTTPS/TLS), encryption of data at rest, access control and authentication mechanisms, network security protections such as firewalls, monitoring and logging systems, and regular security reviews and vulnerability assessments. While we take reasonable steps to protect personal data, no method of transmission or storage is completely secure.

Under GDPR, individuals located in the EEA, UK, or Switzerland have the following rights:

* The right to access – You have the right to request copies of your personal data. We may charge a small fee for this service.
* The right to rectification – You have the right to request that we correct any personal data you believe is inaccurate, and to complete information you believe is incomplete.
* The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
* The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
* The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions. If you exercise your rights to restrict or object to processing, we may not be able to provide all our Services to you.
* The right to data portability – You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Individuals also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, you can fill out the DSAR form and email it to hr@anakin.company.

Where personal data is obtained indirectly from publicly available sources, Anakin may not have a direct relationship with the data subject. In such cases, requests will be handled in accordance with applicable legal obligations, and certain limitations may apply where identification is not feasible or would require disproportionate effort.

Personal data collected or processed through our Services may be transferred to and stored in countries outside the European Economic Area (EEA), including India, where our infrastructure and service providers are located.

This includes data provided directly by users (e.g., account information, contact details) as well as data processed as part of service functionality (e.g., data retrieved from external sources based on user instructions).

As these countries may not provide an adequate level of data protection as determined by the European Commission, we ensure that such transfers are safeguarded through appropriate mechanisms, including Standard Contractual Clauses (SCCs) and contractual arrangements with our service providers.

When transferring personal data internationally, we implement appropriate safeguards, which may include Standard Contractual Clauses approved by the European Commission, contractual agreements with service providers, and other legally approved transfer mechanisms.

Our services are not directed toward individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that personal data from a child has been collected without appropriate consent, we will take steps to delete such information. Parents or guardians who believe their child has provided personal data should contact us.

Anakin has appointed a Data Protection Officer (DPO) responsible for overseeing data protection practices. The DPO monitors compliance with data protection laws, advises on privacy practices, cooperates with supervisory authorities, and acts as a point of contact for data subjects.

For privacy-related inquiries or requests, please contact:

Data Protection Officer (DPO): Nikhil H R
Email: hr@anakin.company
Phone: +91 6361601184
Address: 4th floor, 168, 19th Main Rd, Sector 4, HSR Layout, Bengaluru, Karnataka 560102, India

Anakin Technologies, Inc.
1111B S Governors Ave, STE 25606
Dover, DE 19904, United States

Subsidiary locations may include operations in:

India — Anakin Skywalker Private Limited, Bangalore, Karnataka, India
Singapore — Anakin Technologies Private Limited, Singapore

All privacy practices described in this policy apply across these locations unless otherwise specified.