Apify Privacy Policy
Last Updated: July 9, 2026
Welcome to the Apify Privacy Policy!
Apify Technologies s.r.o. ("Apify," "we," or "us") operates the website apify.com ("Website"), provides its users with the Apify platform (the "Platform") and some other services and functions, as specified in the Apify General Terms and Conditions (the "Services").
Apify is committed to transparency in the processing of your personal data. This Privacy Policy describes how we collect, use, disclose, and otherwise process information relating to identified or identifiable individuals ("Personal Data") and the rights and choices available to you regarding that processing. Capitalized terms not otherwise defined in this Privacy Policy have the meanings set forth in the Apify General Terms and Conditions.
PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR PERSONAL DATA. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE OUR WEBSITE OR SERVICES.
When the Privacy Policy applies
This Privacy Policy applies where Apify acts as a data controller of your Personal Data. This includes when you:
- Visit or interact with our Website or branded social media pages;
- Create or manage an Account on the Platform;
- Use our Services where we act as a controller of your Personal Data;
- Register for or attend our events, webinars, conferences, or training sessions;
- Communicate with us, including through support, sales, or other inquiry channels;
- Receive communications from us;
- Apply to a job offer at Apify;
- Are employed by or work for a customer or partner who interacts with us in a context where Apify acts as a controller (for example, during the sales or contracting process);
- Participate in surveys, research, or contests facilitated by us; or
- Interact with our community, including the Apify Store, public forums, or developer resources.
When the Privacy Policy does not apply
- Apify as a data processor. In case you decide to collect and manage Personal Data when using the Platform or other Services, Apify is a "data processor," not a "data controller" (as defined by applicable privacy laws), of the Personal Data we process under your instructions and on your behalf. This Privacy Policy does not apply to such processing activities. They are governed by the Apify Data Processing Addendum (or a separately executed data processing agreement) between Apify and you. For detailed privacy information about how a specific Apify customer handles Personal Data processed through our Services, please contact that customer directly. We are not responsible for our customers' privacy or data security practices, which may differ from those described here.
- Employees and contractors. This Privacy Policy does not apply to Personal Data about current and former Apify employees, or contractors and agents acting in similar roles, which is governed by separate internal notices.
- Third-party services. Our Website and Platform may contain links to third-party websites, applications, and services. This Privacy Policy does not apply to the information practices of those third parties. We encourage you to review their privacy policies before interacting with them.
Personal Data we collect
Personal Data you provide to us
We collect Personal Data that you provide directly to us. The types of data we collect depend on how you interact with us and may include:
- Account and profile information. When you create a user Account on the Platform, we collect your name, email address, username, password, and other information you provide us with. You may also voluntarily provide a short bio, homepage URL, GitHub username, social media usernames, and a profile picture, which may be displayed on your public profile on the Platform.
- Billing and payment information. When you purchase paid Services, we collect billing information such as your name, billing address, and payment details. We use secure third-party payment service providers to process payments.
- Communications and support information. When you contact us (including through email, chat, support tickets, or social media channels), we collect the content of your communications, your contact details, and any other information you choose to provide.
- Event and registration information. When you register for or attend our events, webinars, conferences, or training sessions, we collect registration information such as your name, email address, company name, job title, and any other information provided during registration.
- Job application information. When you apply for a position at Apify, we collect information about your professional career and educational background, including your name, contact details, current and previous job positions, degrees, qualifications, resume or CV, and cover letter.
- Survey and feedback information. When you participate in surveys, provide feedback, or submit testimonials, we collect the information you provide as part of that activity.
- Public forum and community contributions. When you post reviews, issues, comments, or other content on Apify Store, community forums, blogs, or other publicly accessible areas of our Services, we collect the information you submit. See the "Public forums and Actor Reviews" section for more details.
- Verification data. In certain circumstances, we may ask you to verify your identity. If you choose to do so, data we will collect includes, depending on the method: an image of your government-issued identity document and the information appearing on it (such as your ID number and date of birth); your image in photo or video form, facial geometry templates; and the result of the verification.
Personal Data we collect through automated means
Like most websites and technology services, we automatically collect certain information when you visit our Website and use our Services. This information may include:
- Device and connection information. Device name, operating system type and version, browser type and version, language settings, unique device identifiers, and screen resolution.
- Network and access information. IP address, Internet service provider, hostname, and approximate geographic location inferred from your IP address.
- Usage information. Date and time of access, pages and features viewed, actions taken within the Platform, search queries, referring and exit URLs, session duration, clicks, and interactions with content and features.
- Logs. Connection logs and statistics about data sent to and from other devices in connection with your use of the Services.
Cookies
When you visit our Website or use our Services, we may collect Personal Data through cookies, web beacons, pixels, and similar technologies. These technologies help us provide and improve our Services, analyze usage, personalize content, and deliver relevant advertising. If you provide us with Personal Data, cookies may act as an identifier that ties your information to your device or IP address.
Other than cookies necessary for the Website to function, you can choose not to allow cookies. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.
Personal Data we collect from other sources
We may also obtain Personal Data about you from other sources, including:
- Third-party data providers. We may receive business contact information (such as name, email address, job title, company name, and professional profile information) from third-party data providers and publicly available sources to support our sales, marketing, and business development activities.
- Advertising and analytics partners. We may receive information about your interactions with our advertisements on third-party platforms, including conversion data and audience insights.
- Third-party integrations and sign-on services. If you create or log into your Account using a third-party service (such as Google or GitHub), we receive certain information from that service, such as your name and email address, as permitted by your settings with that third-party service. The information we receive depends on the settings, permissions, and privacy policy of the third-party service. You should review the privacy settings and notices of those services to understand what data may be disclosed to us.
- Event partners and co-marketing partners. If you interact with us at events hosted or co-sponsored by our partners, we may receive registration or contact information from those partners.
We may combine Personal Data collected from these sources with information we collect through other means described in this Privacy Policy.
How we use your Personal Data
We process your Personal Data for the following purposes:
-
Providing and administering the Website and Services
- Authenticating you and providing access to the Platform and Services;
- Processing payments and managing your subscription;
- Creating and maintaining your Account and publicly visible Apify profile (populated only with information you choose to provide);
- Providing customer support and responding to your requests, questions, and feedback.
-
Improving and developing our Services
- Assessing trends, usage patterns, and user behavior across the Website and Platform to determine what new features, integrations, or improvements may be of interest to users;
- Conducting research and analysis regarding the use of the Services;
- Testing new features and functionality;
- Diagnosing and resolving technical issues.
-
Marketing and promotional communications
- Contacting you by email, postal mail, or phone with news, updates, promotions, surveys, or contests relating to the Services or other offerings that may be of interest to you, in accordance with applicable legal requirements;
- Customizing and optimizing the content and advertising you see on our Website and on third-party platforms;
- Uploading hashed customer identifiers (such as email addresses) to advertising platforms (including Google, LinkedIn, X, and TikTok) for the purpose of creating custom audiences, delivering conversion signals, excluding existing customers from acquisition campaigns, and measuring advertising effectiveness;
- Using cookie-based and pixel-based retargeting technologies on our Website and third-party platforms to deliver relevant advertising to visitors and users.
-
Security, fraud prevention, and abuse detection
- Monitoring and protecting against unauthorized access, security incidents, fraud, and other malicious, deceptive, or illegal activity;
- Detecting and preventing violations of our legal terms and policies;
- Protecting the rights, property, or safety of Apify, its users, and the public.
-
Recruiting
- Evaluating and selecting job applicants, including setting up and conducting interviews and assessments;
- Including you in our talent pool and contacting you should a suitable position become available, if you have consented to this.
-
Legal compliance and enforcement
- Complying with applicable laws, regulations, legal processes, and enforceable governmental requests;
- Establishing, exercising, or defending our legal rights;
- Enforcing our agreements.
Legal bases for processing (EEA, UK, and Switzerland)
If you are located in the European Economic Area ("EEA"), the United Kingdom ("UK"), or Switzerland, we process your Personal Data only where we have a valid legal basis. The table below sets out the legal basis we rely on for each processing purpose:
| Processing purpose | Legal basis | Legitimate interest (where applicable) |
|---|---|---|
| Providing and administering the Services | Performance of a contract | — |
| Improving and developing our Services | Legitimate interest | Understanding how our Services are used and identifying improvements |
| Marketing to existing customers about similar products/services | Legitimate interest | Promoting our Services to existing users |
| Marketing to prospective customers | Consent | — |
| Uploading hashed customer identifiers to ad platforms for audience matching, conversion tracking, and exclusions | Legitimate interest | Measuring and improving advertising effectiveness, optimizing marketing spend, and reaching relevant audiences |
| Cookie-based and pixel-based retargeting | Consent | — |
| AI and automated processing | Legitimate interest | Improving our Services, providing support, and analyzing usage |
| Security, fraud prevention, and abuse detection | Legitimate interest; or legal obligation | Maintaining the safety and security of our Services |
| Recruiting (evaluation and selection) | Steps necessary prior to entering into a contract; legitimate interest | Assessing candidates |
| Recruiting (talent pool) | Consent | — |
| Legal compliance and enforcement | Legal obligation; or legitimate interest | Establishing, exercising, or defending legal claims |
| Creating your public Apify profile | Performance of a contract and consent | — |
Where we rely on legitimate interest, we have assessed that our interests are not overridden by your data protection rights and fundamental freedoms. You have the right to object to processing based on legitimate interest at any time.
Where we rely on consent, you may withdraw it at any time by contacting us at privacy@apify.com or by using the relevant functionality in the Services (for example, unsubscribe links in marketing emails or cookie preference settings). Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Artificial intelligence and automated processing
We use artificial intelligence ("AI") and automated tools in connection with certain aspects of our Services and operations, including:
- Customer support. We may use AI-powered tools (such as chatbots and automated classification systems) to assist with customer inquiries and improve response times.
- Product features. Certain features of the Platform may leverage AI or machine learning to provide users with functionality (for example, content suggestions, automated workflows, or data extraction capabilities).
- Internal analytics. We may use AI tools to analyze customer interactions, support tickets, and usage patterns to improve our Services and operations.
Where AI processing involves third-party service providers, those providers act as data processors on our behalf and are contractually required to protect your Personal Data in accordance with this Privacy Policy. We do not use Personal Data processed by Apify on behalf of customers (as a data processor) to train AI models unless the customer has separately agreed. Where AI-based processing produces decisions that significantly affect you, you may have rights under applicable law to request human review. See the "Territory-specific terms" section for more details.
How we disclose your Personal Data
-
Service providers (our data processors). We provide access to or disclose your Personal Data to selected third-party service providers who help us operate our Website, provide the Platform, and deliver our Services. These include providers of billing and payment processing, advertising and marketing, analytics and research, customer support, data storage and hosting, security and fraud prevention, web hosting, AI tools, applicant tracking, and legal services. These service providers process your Personal Data on our behalf and under our instructions, and are contractually required to protect it.
-
Advertising and analytics partners. We disclose Personal Data to advertising networks and analytics providers that assist us in measuring, improving, and optimizing our marketing campaigns and website performance. This includes:
- Uploading hashed customer identifiers (such as email addresses) to advertising platforms including Google, LinkedIn, X (formerly Twitter), and TikTok for custom audience matching, conversion tracking, audience exclusions, and campaign optimization;
- Allowing third-party cookies, pixels, and similar technologies on our Website to collect information about your browsing behavior for interest-based advertising and analytics purposes.
This disclosure may constitute "sharing" of Personal Data for purposes of cross-context behavioral advertising under the California Consumer Privacy Act ("CCPA") and similar US state laws.
-
Actor Creators. When you run a third-party Actor (a program developed by a third-party developer, referred to as a "Creator") through the Platform, the Actor operates under your Account and may access certain data within your Account, depending on the permission level it requires:
- Limited permissions (default). The Actor has restricted access, primarily to its own storages, the data it generates, and resources you explicitly provide to it. It cannot access other data in your Account.
- Full permissions. The Actor has access to all data in your Account.
Each Actor's required permission level is displayed in its detail page in Apify Store. When you run a third-party Actor, the Actor Creator may receive or have access to Personal Data in connection with providing the Actor's functionality. You control which Actors you run and what permission level they receive. Wherever possible, we recommend choosing Actors that use limited permissions. We strongly encourage you to review the Actor Creator's privacy practices before running their Actors, particularly those requesting full permissions.
-
Protection of Apify and others. We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to: (a) comply with applicable law, regulation, court order, or other legal process; (b) enforce our agreements; (c) protect the rights, property, or personal safety of Apify, its employees, its users, or the public; (d) detect, prevent, or address fraud, security, or technical issues; or (e) respond to a valid legal request from a public authority.
-
Joint offerings and partners. From time to time, Apify may partner with other companies to offer products or services jointly. If you purchase or specifically express interest in a jointly offered product or service, we may share certain Personal Data with our joint promotion partner(s). Apify does not control its business partners' use of the Personal Data we share with them, and their use is governed by their own privacy policies. If you do not wish for your Personal Data to be shared in connection with joint offerings, you may opt not to purchase or express interest in such offerings.
-
Business transfers. If Apify is involved in a merger, acquisition, reorganization, dissolution, sale of assets, or similar corporate transaction, your Personal Data may be disclosed or transferred as part of that transaction. We will use reasonable efforts to notify you of any such change and of any choices you may have regarding your Personal Data.
-
Corporate Affiliates. We may disclose your Personal Data to our current and future affiliated companies, subsidiaries, and entities under common control, to the extent necessary for the purposes described in this Privacy Policy.
-
With your consent or at your direction. In addition to the circumstances described above, we may disclose your Personal Data to third parties with your consent or at your direction.
How we retain and dispose your Personal Data
We retain your Personal Data for no longer than necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. When we no longer have a legitimate business need or legal basis to process your Personal Data, we will either delete it or anonymize it. If deletion is not immediately possible (for example, because Personal Data has been stored in backup archives), we will securely isolate it from further processing until deletion is possible.
Your rights and your choices
Correcting, updating, and accessing
Upon your request and authentication of your identity, Apify will provide you with information about the Personal Data we have collected from you. You may update, correct, or delete relevant information by contacting us at privacy@apify.com or by updating your Personal Data on the Account Settings page in the Platform.
Requests to access, change, or delete Personal Data will be addressed within 30 days, or earlier if required by applicable law. Where an access request is refused, we will notify you in writing, document the reasons for refusal, and outline further steps available to you.
Removal and objection
- Marketing emails. You may opt out of receiving marketing emails from Apify by clicking on the unsubscribe link within any marketing email. Please note that you may not opt out of certain transactional or service-related communications (such as those confirming your requests, providing billing information, or updating you on our legal terms).
- Cookie-based advertising. You may opt out of cookie-based advertising and analytics by managing your cookie preferences through the cookie settings link on our Website. See our Cookie Policy for more information.
Third-party links and features
The Website and Platform may contain links to third-party websites and features (such as share buttons, social media widgets, or interactive programs). These features may collect your IP address and information about which pages you visit on our sites, and may set cookies to enable them to function properly. These features may be hosted by a third party or directly on our Website. Your interactions with these features are governed by the privacy policy of the company providing them. Apify is not responsible for those websites or services, and we provide the links solely for your convenience.
Public forums and Actor Reviews
Our Website and Platform may offer publicly accessible areas, including:
- Actor Reviews. Users may post public reviews and ratings of Actors in Apify Store. These reviews are visible to all visitors and may display your name, profile picture, and other profile information associated with your Account.
- Issues Tab. Users may post issues and reports related to specific Actors in Apify Store. These submissions are visible to the Creator and other users, and may display your profile information.
- Community forums, blogs, and message boards. Users may participate in publicly accessible discussions.
Please keep in mind that any Personal Data you submit through these public areas, including profile information associated with your Account, may be read, collected, and used by any person who accesses them. Your posts and profile information may remain visible even after you terminate your Account. We urge you to consider the sensitivity of any information you choose to disclose in these public areas.
International transfer of your Personal Data
Your Personal Data is maintained and processed by us and our third-party service providers primarily in the European Union and the United States, and may also be processed and stored in other jurisdictions where Apify or its service providers operate.
Safeguards for international transfers. Where we transfer Personal Data outside of the EEA, the UK, or Switzerland to countries that have not been recognized as providing an adequate level of data protection, we implement appropriate safeguards, including:
- EU Standard Contractual Clauses (and the UK Addendum to such clauses, where applicable), approved by the European Commission under Commission Implementing Decision (EU) 2021/914;
- Adequacy decisions where the European Commission, the UK Secretary of State, or the Swiss Federal Data Protection and Information Commissioner has recognized the recipient country as providing adequate protection; or
- Other valid data transfer mechanisms issued or approved by the relevant authorities.
If you wish to receive further information about the specific safeguards applied to international transfers of your Personal Data, or to obtain a copy of the relevant data transfer mechanism, please contact us at privacy@apify.com.
Territory-specific terms
EEA and the UK
Your data protection rights. Under applicable data protection laws in the EEA and the UK, you may exercise the following rights:
- Right to access. You have the right to obtain confirmation of whether we process your Personal Data, and to obtain a copy of it.
- Right to data portability. You may receive Personal Data that you have provided to us in a structured, commonly used, and machine-readable format, and transmit it to another data controller without hindrance, where the processing is based on your consent or a contract and is carried out by automated means.
- Right to rectification. You have the right to request the correction of inaccurate Personal Data and the completion of incomplete data.
- Right to object. You have the right to object to the processing of your Personal Data where we rely on legitimate interest as a legal basis. Where you object to processing for direct marketing purposes, we will cease such processing without requiring you to provide a specific reason.
- Right to restrict processing. In certain cases, you may request that we restrict the processing of your Personal Data (for example, where you contest its accuracy or where processing is unlawful but you oppose erasure).
- Right to erasure. You may request that we erase your Personal Data in certain circumstances (for example, where it is no longer necessary for the purposes for which it was collected).
- Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority. For users located in the Czech Republic, the competent supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz. If you are located in another EEA member state or the UK, you may also lodge a complaint with the supervisory authority in your country of habitual residence or place of work.
- Right to refuse or withdraw consent. If we ask for your consent to process your Personal Data, you are free to refuse. If you have given your consent, you may withdraw it at any time without adverse consequences. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
- Right not to be subject to automated decision-making. The types of solely automated decision-making referred to in Article 22(1) and (4) of the EU/UK GDPR do not currently take place in connection with your Personal Data. Should this change, we will inform you about the logic involved, the significance, and the possible consequences. You will also have the right to human intervention, to express your point of view, and to contest the decision.
Profiling. Where we use your Personal Data for audience matching, personalization of advertising content, or behavioral segmentation (as described above), this may constitute profiling within the meaning of Article 4(4) of the GDPR. This profiling does not produce legal effects or similarly significantly affect you. You have the right to object to such profiling at any time by contacting us at privacy@apify.com or by using the cookie preference settings on our Website.
Whether the provision of data is required. Certain Personal Data is necessary to enter into and perform our contract with you (for example, your name, email address, and payment information are needed to create your Account and provide you with the Services). If you do not provide this required information, we may not be able to create your Account or deliver the Services. Other Personal Data is optional (for example, your bio, profile picture, social media usernames), and not providing it will not prevent you from using the Services, but may limit certain aspects of your experience.
California residents
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), provides you with additional rights regarding your Personal Data.
Categories of Personal Data collected. We collect the following categories of Personal Data (as defined by the CCPA):
- Identifiers (such as name, email address, username, IP address);
- Commercial information (such as billing records, subscription details, products or services purchased);
- Internet or other electronic network activity information (such as browsing history, search history, interactions with the Website and Platform);
- Geolocation data (approximate location inferred from IP address);
- Professional or employment-related information (such as job title, company name);
- Education information (where provided in connection with a job application or eligibility verification);
- Inferences drawn from the above categories.
Purpose. We collect and use this information for the business and commercial purposes described herein. Disclosure for business purposes. We disclose the categories of Personal Data described above to service providers, advertising and analytics partners, and other third parties as described herein. "Sharing" for cross-context behavioral advertising. As described herein, we may "share" Personal Data (specifically identifiers and internet activity information) with advertising platforms for purposes of targeted advertising. This may constitute "sharing" as defined under the CCPA. No "sale" of Personal Data. We do not "sell" Personal Data as that term is conventionally understood (i.e., we do not disclose Personal Data in exchange for monetary consideration). Sensitive Personal Information. We do not collect or use sensitive personal information (as defined under the CCPA) for purposes of inferring characteristics about you. Your CCPA rights. Subject to applicable exceptions, you have the right to:
- Know what Personal Data we have collected about you and how we have used and disclosed it;
- Access and receive a copy of your Personal Data in a portable format;
- Delete your Personal Data, subject to certain exceptions;
- Correct inaccurate Personal Data;
- Opt out of "sharing" of your Personal Data for cross-context behavioral advertising;
- Not be discriminated against for exercising your CCPA rights.
How to exercise your rights. To exercise your rights, please contact us at privacy@apify.com. We will verify your identity using the information associated with your Account. You may also designate an authorized agent to exercise these rights on your behalf; we may require the agent to provide proof of authorization and may need to verify your identity directly.
Cookie-based opt-out. To opt out of the "sharing" of your Personal Data through cookie-based mechanisms, manage your preferences through the cookie settings on our Website.
How we protect your Personal Data
We implement appropriate technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, loss, or destruction. These measures include:
- Encryption of data in transit and at rest;
- Access controls limiting access to Personal Data to Apify employees, service providers, and agents who need it to operate, develop, or improve our Services, and who are bound by confidentiality obligations;
- Regular security assessments and monitoring;
- Incident response procedures.
While we work hard to protect your Personal Data, no security system is impenetrable, and we cannot guarantee the absolute security of your information. If you wish to learn more about our security practices, please visit our Trust Center. If you become aware of or suspect any unauthorized use of your Account, please contact us immediately at privacy@apify.com.
Children and privacy
Our Website, Platform, and Services are not directed to children under the age of 16, and we do not knowingly collect Personal Data from children under 16. If we become aware that a child under 16 has provided us with Personal Data without appropriate parental consent, we will take steps to delete such information promptly.
If you believe that we have collected Personal Data from a child under 16, please contact us at privacy@apify.com.
Aggregate and de-identified data
Apify may collect, generate, and use aggregate and de-identified data that cannot reasonably be used to identify you. Such data is not Personal Data and is not subject to this Privacy Policy. We may use and disclose aggregate and de-identified data for any lawful purpose, including for business analytics, internal reporting, revenue planning, capacity planning, product strategy, and marketing analysis. We will maintain and use such data in de-identified form and will not attempt to re-identify it, except as permitted by law.
Changes to our Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. We will post any changes on this page and update the "Last Updated" date at the top.
If we make changes that materially affect your rights or how we process your Personal Data, we will provide additional notice as appropriate, such as by posting a prominent notice on our Website or by sending you an email notification.
Your continued use of the Website, Platform, and Services after any changes to this Privacy Policy have been published constitutes your acknowledgment of those changes.
Contact us
If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your data protection rights, please contact us at:
Email: privacy@apify.com
Mail: Apify Technologies s.r.o., Vodičkova 704/36, Nové Město, 110 00 Praha 1, Czech Republic, Attn: Apify Legal Team