Publicly available data only
Xymotrone is for pages any visitor can reach. It is not a tool for circumventing access controls or acquiring data you have no right to see.
ethical web data charter
The data collection platform compliance teams can approve
Web data work lives or dies on how it is done. These are the commitments Xymotrone is built around — enforced in the product, not just written on a page.
Respect site directives
Customers are expected to honour robots directives and site terms for the targets they configure. Collection profiles make it easy to exclude paths.
Rate limits, not floods
Concurrency ceilings and request budgets are enforced on every plan. Volumetric traffic and denial-of-service patterns are prohibited and blocked.
Credentials stay sealed
Stored logins and provider keys are write-only from the browser and read exclusively server-side. They are never returned to the client or logged.
DPA available
A Data Processing Agreement is available on request for teams that need one before onboarding. GDPR-aligned handling for personal data in scope.
Transparent network sourcing
You attach your own proxy providers, so you always know where exits come from and under what contract. No opaque resale of consumer bandwidth.
Certifications
SOC 2 Type II is in progress. We publish status changes here rather than displaying badges we have not yet earned. For security questionnaires, DPAs or sub-processor lists, contact us from your account and we will respond directly.