Legal
Privacy Policy
Last updated: 2026-05-27
This Privacy Policy explains how Bagelmen LLC ("we", "us") collects, uses, and safeguards information when you use the gottem web-scraping API and related services at gottem.dev (the "Service"). gottem is a hosted API that fetches the URLs you submit and returns their content. We aim to collect only what we need to run the Service, and to be plain about what that is.
1. Information we collect
- Account data. When you create an account we collect your email address and authentication credentials. We do not require a name, phone number, or physical address to use the Service.
- API usage metadata. Each request you make is recorded as a
scrape_requestsrecord: the target URL, the route/provider that handled the fetch, response status, byte counts, latency, credit cost, and timestamps. We use this for billing, rate limiting, debugging, and abuse prevention. - Billing data. Payments are processed by Stripe. We store a Stripe customer reference and credit-ledger entries. We never see or store your full card number. Stripe handles card details under its own privacy terms.
- Vendor keys (BYOK). If you store a third-party scraping vendor key, it is encrypted at rest with AES-256-GCM. We retain only a fingerprint and metadata in plaintext.
- Technical data. Standard server logs (IP address, user agent, request time) are kept short-term for security and operational diagnostics.
2. Scraped content
When you submit a URL, gottem fetches that page through a scraping provider and returns its content to you in the API response. This scraped content is processed transiently to fulfill your request. We do not build a permanent archive of the pages you scrape, and we do not use scraped content to train models or for any purpose beyond returning it to you. Limited request metadata (not page bodies) is retained as described above.
3. How we use information
- To operate, maintain, and improve the Service.
- To authenticate you and authorize API requests.
- To meter usage, calculate credit costs, and process billing.
- To enforce rate limits, detect abuse, and protect the Service and its users.
- To respond to support requests and send essential service notices.
4. We do not sell your data
We do not sell, rent, or trade personal information. We do not share it for third-party advertising. We share data only with infrastructure providers that help us run the Service (for example, our hosting, database, and payment processors), and only as needed for them to perform their function. We may also disclose information where required by law or to protect our rights and the safety of the Service.
5. Security
API access is authenticated with bearer keys; raw keys are shown to you only once and stored hashed. Stored vendor keys are encrypted at rest. Data is transmitted over TLS. We restrict internal access to production data to those who need it. No system is perfectly secure, but we take reasonable measures to protect your information and respond promptly to incidents.
6. Data retention
Account and billing records are kept for as long as your account is active and as required for tax and accounting obligations. Request metadata is retained for a limited operational window. You may request deletion of your account by contacting us; some records may be retained where legally required.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal data we hold about you. To exercise these rights, email us at support@gottem.dev and we will respond within a reasonable period.
8. Children
The Service is intended for developers and businesses and is not directed to children under 16. We do not knowingly collect personal data from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service or by email.
10. Contact
Questions about this policy or your data? Email support@gottem.dev.