Privacy Policy
Last updated: March 19, 2026
This policy applies to the canyougrab.it marketing site, developer portal, API, docs, support channels, and MCP integrations.
Overview
CanYouGrab.it provides domain availability tools for developers and AI clients. This page explains what information we collect, how we use it, the providers we rely on, and how to contact us about privacy questions.
Information We Collect
Account and profile information
- Authentication identifiers such as your Auth0 subject and authentication provider
- Account profile fields such as email address, normalized email, email verification status, display name, profile image URL, and last login time
API and usage information
- Domain names submitted for availability checks
- Lookup metadata such as timestamps, confidence and source fields, cache details, error states, usage counts, plan status, quota state, and API key identifiers or prefixes
Billing information
- Stripe customer, subscription, checkout, and billing portal records
- Billing status and, for certain anti-abuse flows, Stripe card fingerprint data
- We do not store full payment card numbers ourselves; Stripe handles that
Security and anti-abuse information
- IP address and request metadata used for security, rate limiting, and abuse review
- Cloudflare Turnstile verification data when bot checks are enabled
- Device fingerprint visitor IDs, normalized email comparisons, and risk signals
- API key creation, rotation, and revocation events
Support and communications
- Messages you send through email or the Chatwoot support widget
- If you use the authenticated portal, Chatwoot may be identified with your email, name, and avatar so we can support your account
- Internal new-user operational alerts may include your email, name, and auth provider
How We Use Information
- Provide the website, portal, API, docs, and MCP integration
- Authenticate users, provision API keys, and manage accounts
- Process billing, subscription changes, and quota tracking
- Detect abuse, fraud, duplicate signups, and suspicious activity
- Respond to support requests and improve reliability
Service Providers and Sharing
We do not sell personal information. We share information with service providers only as needed to run the service, including Auth0 for authentication, Stripe for billing, Cloudflare for bot protection and edge or network services, Chatwoot for support messaging, Slack for internal operational alerts, and hosting or infrastructure providers used to operate the platform.
Domain lookups are performed through our own resolver and WHOIS or RDAP tooling, which may in turn query the internet infrastructure or registry systems needed to answer your request.
MCP and AI Integrations
If you connect CanYouGrab.it to ChatGPT, Claude, or another MCP client, we receive the tool inputs and outputs needed to perform the requested lookup, such as domain names and authorization credentials. We do not intentionally store full chat transcripts through the MCP server, but the AI platform you use may have its own logging and retention practices.
Cookies and Similar Technologies
The marketing site and portal load a Chatwoot support widget. The portal also uses authentication and bot-protection flows that may rely on cookies, tokens, or similar storage. We use these technologies for sign-in, security, support, and session continuity rather than ad targeting.
Retention
We keep information for as long as reasonably needed to operate the service, secure accounts, comply with billing, tax, and legal obligations, resolve disputes, and enforce our terms. Retention periods vary by data type.
If you close your account, we will delete or de-identify information we no longer need, subject to legal, accounting, security, and fraud-prevention requirements.
Your Choices
- Request access to or deletion of your account data
- Revoke API keys and disconnect integrations you no longer want to use
- Contact us with privacy questions, support issues, or correction requests
Contact
For privacy questions or data requests, email [email protected].