Plain language, first person, and not legal advice: this page explains what data these tools touch, because the honest answer is short.
Commercial listing data and organization-level facts: titles, prices, locations at the precision the source publishes, links, technology names. No seller identities, no contact data, no profiles - by construction (see how that works).
Runs execute on the Apify platform inside your own account. Results land in your datasets, under your retention settings. I store nothing from your runs, see nothing of your runs, and hold no copy of your data.
A data processing agreement governs the processing of personal data on someone's behalf. These tools are built so that no personal data is extracted in the first place, and I never receive your run output - so there is nothing for a DPA to govern. If your own use of a tool collects personal data downstream, that processing is yours and your adviser's to assess.
None on my side. The platform (Apify) hosts and bills your runs under its own terms and DPA, which you accept directly with them.
Static files, no cookies, no trackers, no analytics scripts. Hosted in the EU.