This policy explains what information Shoal Technologies ("Shoal," "we," "us") collects when you use this website or our API, how we use it, and the choices and rights available to you. It applies to shoal.online and the Shoal API and dashboard once they are generally available.
Information we collect
We collect information in a few limited ways:
- Information you give us directly: name, email, company, and message content when you submit the contact or sales forms, or sign up for an account.
- Account and billing information: email address, authentication identifiers (or your SSO provider's identifier), and billing details handled by our payment processor — we do not store full card numbers ourselves.
- API usage metadata: which endpoint was called, timestamps, request/response status, and credit consumption, so we can bill accurately and debug issues.
- Standard technical data: IP address, browser type, and page interactions on this site, used for basic analytics and abuse prevention.
What we don't do with your data
We do not sell personal information. We do not use the content you submit to Shoal — the URLs you fetch, the data our API returns to you, or the prompts you give Autopilot — to train machine learning models, ours or anyone else's. That data belongs to you and is used solely to fulfill your request.
How we use information
- To operate, maintain, and improve the API and this website.
- To respond to support and sales inquiries.
- To process billing and enforce usage limits tied to your plan.
- To detect, investigate, and prevent abuse, fraud, or security incidents.
- To comply with legal obligations.
How we protect information
We encrypt data in transit using TLS, and we design storage for sensitive data — credentials, API keys, billing identifiers — to be encrypted at rest. Access to production systems is limited to the people who need it to do their job, on a least-privilege basis. No method of transmission or storage is perfectly secure, but this is the standard we build to and hold our infrastructure providers to.
Data retention
We keep account and billing data for as long as your account is active and as needed to meet legal and accounting obligations afterward. API request metadata used for billing is retained for a limited window for support and dispute purposes, then deleted or aggregated. You can request deletion of your account data at any time — see "Your rights" below.
Your rights (GDPR, CCPA, and similar laws)
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data.
- Receive a portable copy of your data.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
To exercise any of these rights, email privacy@shoal.online. We'll respond within the timeframe required by applicable law.
International transfers
We may process and store information in countries other than your own. Where required, we rely on appropriate safeguards — such as standard contractual clauses — for these transfers.
Children
Shoal is not directed at children, and we do not knowingly collect personal information from anyone under 16.
Changes to this policy
We'll update the "last updated" date above when this policy changes, and post a notice on this page for material changes.
Contact
Questions about this policy or your data: privacy@shoal.online.