This Compliance Statement explains the compliance principles that apply to the Scravio Service operated by Zorix, LLC, doing business as Scravio ("Scravio," "we," "us," or "our").
This page is a summary and should be read together with the Terms of Service, Privacy Policy, Refund & Cancellation Policy, Data Processing Addendum, Security Page, and How Scravio Obtains Data.
1. Business-use SaaS
Scravio is designed for business and professional use.
Customers are responsible for ensuring that their use of the Service, Customer Content, sources, instructions, Outputs, exports, and downstream activities comply with applicable laws and third-party terms.
2. Public-source limitation
Scravio is designed to process public, non-gated, non-password-protected business information based on customer instructions.
Customers must not use Scravio to access private accounts, login-only areas, paywalled pages, restricted APIs, internal systems, confidential databases, or sources protected by access controls.
Customers must not use Scravio to bypass CAPTCHA, paywalls, rate limits, IP blocks, robots.txt, technical restrictions, security controls, or platform restrictions.
3. Privacy and data protection
Customers are responsible for determining whether they have a lawful basis to submit, discover, validate, enrich, export, contact, or otherwise use personal data through Scravio.
Where Scravio processes Customer Personal Data under customer instructions, Scravio acts as a processor, service provider, or contractor as described in the Data Processing Addendum.
Where Scravio processes account, billing, support, security, analytics, fraud prevention, legal compliance, or Service administration data, Scravio acts as controller as described in the Privacy Policy.
4. GDPR and UK GDPR
For customers subject to GDPR or UK GDPR, Scravio provides a Data Processing Addendum that includes processor obligations, subprocessor rules, security measures, data subject request assistance, deletion/return obligations, and international transfer safeguards where applicable.
Customers remain responsible for:
- lawful basis;
- privacy notices;
- legitimate interest assessments where applicable;
- consent where required;
- data subject rights;
- marketing compliance;
- source and platform compliance; and
- downstream use of Outputs.
5. U.S. state privacy laws
Where applicable, Scravio processes Customer Personal Data as a service provider, contractor, or processor under U.S. state privacy laws.
As of the Last Updated date, Scravio does not sell personal information or share personal information for cross-context behavioral advertising as described in the Privacy Policy.
If Scravio changes practices that require additional opt-out mechanisms, Scravio will update its Privacy Policy and provide required controls.
6. Direct marketing and anti-spam laws
Customers are responsible for direct marketing compliance.
If customers use Outputs for outreach, they must comply with applicable laws such as CAN-SPAM, CASL, PECR, ePrivacy rules, GDPR, UK GDPR, CCPA/CPRA, and similar laws.
Customers must provide required identification, lawful basis or consent where required, accurate sender information, required postal address information, unsubscribe mechanisms, opt-out handling, and suppression-list management.
Scravio does not control customer campaigns and is not the sender or initiator of customer outreach unless expressly agreed in writing.
7. No sensitive data or children's data
Scravio is not designed to collect or process sensitive personal data, special category data, children's data, protected-class data, health data, biometric data, financial account data, government identifiers, or precise geolocation.
Customers must not submit or instruct Scravio to process these categories.
8. No consumer reporting or eligibility decisions
Scravio is not a consumer reporting agency. Outputs are not consumer reports.
Customers must not use Scravio or Outputs for credit, employment, housing, tenancy, insurance, lending, education, benefits, healthcare, or other regulated eligibility decisions.
9. Platform and website terms
Customers are responsible for complying with third-party platform terms, website terms, API terms, robots.txt, technical restrictions, and contractual restrictions that apply to their sources and downstream use.
Scravio may block, throttle, reject, or terminate tasks, sources, domains, accounts, or workspaces that create legal, operational, platform, or third-party risk.
10. Security
Scravio uses technical and organizational measures designed to protect the Service and Customer Personal Data, as described in the Security Page and DPA.
Customers are responsible for securing their accounts, user access, passwords, API keys, exports, integrations, and downstream systems.
11. Sanctions, export controls, and restricted use
Customers must not use Scravio in violation of sanctions, export control, anti-money laundering, anti-corruption, or restricted-party laws.
Scravio may screen accounts and transactions and may decline, suspend, terminate, or reverse activity where required or appropriate.
12. Abuse enforcement
Scravio may suspend or terminate access for misuse, fraud, spam, unlawful activity, security risk, payment disputes, chargeback abuse, policy violations, or use that creates risk to Scravio, customers, data subjects, target sites, or third parties.
13. Contact
Compliance questions may be sent to:
Email: [email protected]
Company: Zorix, LLC, doing business as Scravio
Address: 1111B S Governors Ave STE 40623, Dover, DE 19904, United States
Phone: +13024402968