PRIVACY POLICY ​
Last updated: July 11th 2025
1. Introduction ​
We, CoreDump Engineering ("we", "us", "our"), are the controller of your personal data.
We are committed to protecting and respecting your privacy. This privacy policy (the "Privacy Policy") applies to all data that we collect from users of our website or subscribers to our services (each a "User", "you").
Please read this Privacy Policy carefully to understand our practices regarding your personal information and how it will be processed. By using our website or services, you acknowledge that we will process your personal data as described in this Privacy Policy.
2. Definition ​
For the purpose of the Privacy Policy, notably, the terms “Personal Data,” “Processing,” “Data Subject,” “Data Controller,” “Data Processor,” and “Personal Data Subject” have the meaning given by the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and the French Data Protection Act entitled “Loi Informatique et Libertés” No. 78-17 of 6 January 1978 as amended (the “LIL”) (altogether the “Data Privacy Regulation”).
3. Who is Data Controller and Data Subjects? ​
CoreDump Engineering is responsible for all data processing in its professional capacity and within its business activity. In this capacity, CoreDump Engineering is subject to the obligations imposed upon it by the Data Privacy Regulation.
Data subjects are suppliers, service providers, consultants, partners, customers, and prospects as well as their employees and more generally anyone using the Website (the “Users” or “You”).
In the event our Website or services contain links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, You should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.
4. What Personal Data do We collect? ​
4.1 Information You Give Us Directly ​
We collect the following information when you provide it to us:
- Account information: When you create an account, we collect information such as name, email address, and company information.
- Communication information: Information you provide when contacting us such as your name, email address, and the content of your message.
- Payment information: If you subscribe to a paid plan, we collect payment details. Full credit card information is not stored by us but by our payment processor.
- User preferences: Preferences set in your account settings.
- Service usage information: Information about how you use our services, including the features you use and the time spent on our services.
4.2 Information We Collect Automatically ​
When you interact with our services, we automatically collect:
- Device and usage information: Device and usage information such as Your IP address, device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Website and services, and other technical information. This information is primarily needed to maintain the security and operation of our Website and services, and for Our internal analytics and reporting purposes. Like many businesses, We also collect information through cookies and similar technologies.
5. What are the Legal Bases for Processing Your Personal Data? ​
Our lawful bases depend on the services You use and how You use them. This means We only collect and use Your Personal Data on the following grounds:
Consent From You Where You give us consent to collect and use Your Personal Data for a specific purpose. You may withdraw Your consent at any time using the features we provide; however, this will not affect any use of Your Personal Data that has already taken place. You may consent to provide Your email address for the purpose of receiving marketing emails from Us. While You may unsubscribe at any time, We cannot recall any email We have already sent. If You have any further inquiries about how to withdraw Your consent, please feel free to inquire using the details provided hereinafter.
Performance of a Contract or Transaction Where You have entered into a contract or transaction with Us or in order to take preparatory steps prior to Our entering into a contract or transaction with You. For example, if You contact Us with an inquiry, We may require Personal Data such as Your name and contact details in order to respond.
Our Legitimate Interests Where We assess it is necessary for Our legitimate interests, such as for Us to provide, operate, improve, and communicate Our services. We consider Our legitimate interests to include research and development, understanding Our audience, marketing, and promoting Our services, measures taken to operate Our services efficiently, marketing analysis, and measures taken to protect Our legal rights and interests.
Compliance with Law In some cases, We may have a legal obligation to use or keep Your Personal Data. Such cases may include (but are not limited to) court orders, criminal investigations, government requests, and regulatory obligations. If You have any further inquiries about how We retain personal information in order to comply with the law, please feel free to inquire using the details provided in the Contact Us section of this Privacy Policy.
6. How do CoreDump Engineering use Your Personal Data? ​
Depending on whom it concerns (prospects, customers, service providers, or suppliers), CoreDump Engineering carries out various types of processing.
Personal Data from prospects is processed to: ​
- Build a database of prospects and carry out sales canvassing as well as to manage and send business newsletters (unless the recipient has opted out).
Personal Data relating to User’s employees is processed as per the following objectives: ​
- Facilitate account creation and logon process: If You choose to link Your account with us to a third-party account (such as your Google or GitHub account), We use the Personal Data You allowed Us to collect from those third parties to facilitate account creation and logon process for the performance of the contract.
- Provision of Software and Services: This relates to in particular allowing contracts to be drawn up, Software to be provided, and Services to be delivered, and invoices to be issued and sent. As part of Our activities, CoreDump Engineering archives and logs all actions performed on the Software by the User's employees.
- License management: CoreDump Engineering collects and processes Personal Data relating to User that are using the Scrapoxy Software as defined in the General Conditions and more generally in the Agreement.
- Litigation management: CoreDump Engineering collects and processes Personal Data relating to User payment delays and defaults in order to prepare, take, and monitor any recovery action or legal remedy and where applicable enforce the judgment issued.
- Auditing: As part of an audit or potential buyback operation of CoreDump Engineering, audits by potential investors, buyers, or purchasers may be carried out. Internal audits may also be carried out to check that Our processes are being correctly implemented or to verify Personal Data processing from the User database.
- Customer relationship management: In order to provide Users with the best possible service and improve the solutions offered, CoreDump Engineering also processes User Personal Data when managing the termination of a contract or in order to offer improvements to the Software, new Services, commercial offers, and discounts. As part of its customer relationship management, CoreDump Engineering must also record all email exchanges with the User's employees. Finally, CoreDump Engineering may conduct surveys on the quality of the Software and Services provided in order to improve them.
- Marketing: Create a database of persons interested in CoreDump Engineering's Software and services and conduct possible marketing actions as well as to manage and send newsletters (unless Users have expressly opted out as described hereinafter in the "What are Your privacy rights?").
- Other Business Purposes: CoreDump Engineering may use Your Personal Data for other Business Purposes such as data analysis, identifying usage trends, determining the effectiveness of Our promotional campaigns, and evaluating and improving our Software and Services, Website, products, marketing, and your experience. CoreDump Engineering may use and store this information in aggregated and anonymized form so that it is not associated with individual end-users and does not include personal information. CoreDump Engineering will not use identifiable Personal Data without Your consent.
Regarding the Processing of Personal Data from Cookies, the dedicated CoreDump Engineering’s Cookie Policy describes the terms and conditions of implementation of such processing.
Supplier Personal Data is only processed for: ​
- The purposes of establishing, negotiating, and monitoring a contractual relationship (carrying out services, invoicing, payment, etc.) as well as for the purposes of dealing with any disputes that may arise.
7. Will Your Personal Data be shared with anyone? ​
Access to Personal Data is restricted to those who require access to such information in order to fulfill their duties within CoreDump Engineering. Personal Data collected can thereby be accessed within CoreDump Engineering by the appropriate departments in order to manage the different processes concerned (sales department for contractual relationships, legal department for disputes, IT department for maintenance, etc.) User’s employee Personal Data may also be viewed by the User itself.
For certain purposes, CoreDump Engineering may sometimes use the services of subcontractors or service providers (e.g. those in charge of maintaining CoreDump Engineering’s information system or providing administrative services such as accounting and payroll) such as IT service providers (e.g. web hosting) offering SaaS solutions who require access to Personal Data to carry out the tasks entrusted to them by CoreDump Engineering, including some which may be located outside of France. In this instance, CoreDump Engineering enforces strict obligations on these co-contracting parties in accordance with data processing confidentiality and security Data Privacy Regulations to which these service providers have access. This is particularly important if these transfers take place outside of the EU.
In certain specific cases, CoreDump Engineering may also communicate Personal Data to third parties:
- Business Transfers: We may share or transfer Your Personal Data in connection with or during negotiations of including for auditing purposes any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. If all or part of CoreDump Engineering’s assets are acquired by a third party, Personal Data will be one of the transferred assets. Personal Data will be processed by the purchaser who will act as the new Data Controller, and the purchaser’s policy on data protection will then govern the data processing.
- Vendors, Consultants, and Other Third-Party Service Providers: We may share Your Personal Data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include payment processing, data analysis, email delivery, hosting services, customer service, and marketing efforts. We may allow selected third parties to use tracking technology on our Website, which will enable them to collect Personal Data about how You interact with our Website over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, and better understand online activity. Unless described in this Privacy Policy, we do not share, sell, rent, or trade any of Your Personal Data with third parties for their promotional purposes.
- Third-Party Advertisers: We may use third-party advertising companies to serve ads when you visit our Website. These companies may use information about Your visits to our Website(s) and other websites that are contained in web cookies and other tracking technologies in order to provide advertisements about goods and services of interest to you.
- Business Partners: We may share Your information with our business partners to offer you certain products, services, or promotions.
- A parent, subsidiary, or affiliate of CoreDump Engineering.
- If CoreDump Engineering is obliged to disclose or provide access to Personal Data in order to comply with any legal obligation or a court ruling or in order to uphold or apply the service agreement or circumstances other than those accepted or to protect the rights, property, or safety of CoreDump Engineering, its customers, or its employees.
- If this transfer of data by CoreDump Engineering is permitted by law. CoreDump Engineering does not sell any Personal Data to third parties. For purposes of the Privacy Policy, “sell” means the disclosure of Personal Data to a third-party for monetary or other valuable consideration.
8. How long do we keep Your Personal Data? ​
Personal Data (especially Personal Data that relates to contracts concluded with CoreDump Engineering) is stored as long as is strictly necessary in order to allow us to provide our services, until the termination of a contract, for the duration required by law, or for a duration sufficient for the objective sought to be secured. In any case, this Personal Data must be stored in accordance with CNIL recommendations. For example:
- Personal Data relating to prospects or Customers is deleted within 3 years of its collection or within 3 years of the last contact with the prospect or Customer.
- Pre-litigation: Personal Data is held until a settlement agreement has been concluded or failing this until the corresponding legal action has been prescribed.
- Judicial litigation: Data is held until the decision has the force of res judicata. When we have no ongoing legitimate business need to process Your Personal Data, we will either delete or anonymize it, or if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store Your Personal Data and isolate it from any further processing until deletion is possible.
Furthermore, anonymous data and data relating to Users may be held for an unlimited period of time when it does not contain or no longer contains any Personal Data.
9. Your Data Protection Rights ​
- Right to access: Request copies of your personal data that we hold.
- Right to rectification: Request correction of any incomplete or inaccurate data we hold about you.
- Right to erasure: Request deletion of your personal data when there is no good reason for us to continue processing it (also known as the 'right to be forgotten').
- Right to restriction of processing: Request we suspend processing of your personal data in certain scenarios.
- Right to data portability: Request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
- Right to object: Object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing.
- Rights related to automated decision making: Request human intervention for automated decisions that have legal or similarly significant effects on you.
How to exercise your rights: Please contact our Data Protection Officer at dpo@scrapoxy.io. You are not required to pay any charge for exercising your rights. We will respond to all legitimate requests within one month.
10. Personal Data localization and existing safety measures ​
Personal Data We collect is hosted and/or processed by providers located either in the United States, the European Union, or where We or our partners, affiliates, and third-party providers maintain facilities in compliance with the regulations applicable for this type of Personal Data transfer.
For Personal Data transfers, CoreDump Engineering has adopted specific measures; for instance, standard contractual clauses adopted by the European Commission have been added and include additional safeguards for Personal Data processes in countries with legislation that does not meet European standards. In any case, CoreDump Engineering ensures that all transferred Personal Data is adequately protected in order to guarantee the Personal Data’s security, integrity, and confidentiality in accordance with the applicable regulation.
CoreDump Engineering shall take all suitable precautions to guarantee the confidentiality and security of the Personal Data and to prevent it from being tampered with, corrupted, or accessed by unauthorized persons. A security policy for the information system has been implemented within CoreDump Engineering. For example, Personal Data is stored on secured servers and banking details are encrypted. A login and password are required to access Personal Data.
However, transferring Personal Data via the Internet is not without risk. Therefore, CoreDump Engineering does not guarantee the security of any Personal Data transferred online even when CoreDump Engineering has complied with its security commitments.
11. Do CoreDump Engineering collect Personal Data from minors? ​
We do not knowingly solicit data from or market to children under 18 years of age. As stated in the General Conditions, by using the Services, You represent and warrant that You are at least 18. If We learn that Personal Data from users less than 18 years of age has been collected, We will deactivate the Account and take reasonable measures to promptly delete such Personal Data from our records. If You become aware of any Personal Data We have collected from children under the age of 18, please contact Us at the addresses indicated hereinafter.
12. What are Your privacy rights? ​
Users have the following rights on their Personal Data processed by Us:
- Access to or obtain a copy of their Personal Data.
- Rectification of their Personal Data.
- Have all or part of their Personal Data deleted when the Personal Data (i) is no longer needed for the purposes for which it was collected (ii) is exclusively based on User’s consent (iii) and their Processing undergoes an objection proceeding.
- Limit the processing of their Personal Data temporarily when the accuracy of said Personal Data is challenged, when the User has objected to its processing, and when the Personal Data is no longer needed by CoreDump Engineering but is still mandatory for the establishment, exercise, or advocacy of their rights in court.
- Unsubscribe or opt out of receiving marketing messages at any time by clicking on the “unsubscribe” link in any emails or communication sent by CoreDump Engineering.
- Object to the Processing or withdraw their consent at any time when Personal Data processing is based on consent.
- Portability of their Personal Data when Personal Data is processed based on consent and when the processing is carried out using automated processes.
- Decide what happens to their Personal Data after their death.
- File a complaint with the local control’s authority.
- To exercise their rights or for any questions relating to this Privacy Policy, Users may contact CoreDump Engineering at the following addresses: CoreDump Engineering, 61 rue de Lyon – 75012 Paris France or at dpo@scrapoxy.io and attach a copy of their ID card.
For individuals submitting a request on behalf of another person, we may require proof of authorization and verification of identity directly from the person for whom the request is made.
13. Updates ​
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify You either by prominently posting a notice of such changes or by directly sending You a notification. We encourage You to review this Privacy Policy frequently to be informed of how we are protecting Your information.
14. Changes to This Privacy Policy ​
We may update this Privacy Policy from time to time by:
- Posting a new version on our website.
- Sending you a notification via email.
- Providing you with an updated version of this Privacy Policy when we make material changes.
Please review this Privacy Policy regularly to ensure you are aware of any changes.