Privacy Policy

Introduction

CRYTCL Inc. ("CRYTCL," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at crytcl.com or use our platform and services (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

Information we collect

We collect information you provide directly to us, information collected automatically when you use the Service, and information from third-party sources.

Information you provide

• Account registration details (name, email address, password)
• Profile information and organizational details
• Communications you send us, including support requests
• Payment and billing information processed through our payment providers
• Content you submit to or through the Service, including prompts, uploaded files, and other inputs

Information collected automatically

• Log data: IP address, browser type, pages visited, time and date of visits
• Device information: hardware model, operating system, unique device identifiers
• Usage data: features used, actions taken, session duration
• Cookies and similar tracking technologies (see Cookie Policy below)

How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Process transactions and send related information
• Send administrative communications, including confirmations and security alerts
• Respond to comments and questions and provide customer support
• Analyze usage patterns to improve and develop new features
• Monitor and analyze trends and usage to improve your experience
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

We may aggregate or de-identify your information so that it no longer identifies you, and use this information for the purposes described above. We will maintain and use de-identified information in de-identified form and will not attempt to re-identify it unless required by law.

AI output and accuracy

CRYTCL provides AI-powered features that generate responses and outputs based on your inputs. Due to the probabilistic nature of AI systems, outputs may not always be accurate, complete, or up to date. You acknowledge and agree:

• AI-generated output should not be relied upon as a sole source of truth or factual information
• You should evaluate output for accuracy and appropriateness before acting on it
• AI output should not be used as a substitute for professional advice (legal, medical, financial, or otherwise)
• Output should not be used to make consequential decisions about individuals, such as those relating to employment, credit, housing, or medical treatment

If you believe AI-generated output contains factually inaccurate personal information about you, you may submit a correction or removal request to legal@crytcl.com. We will consider your request based on applicable law and our technical capabilities.

Third-party services

We use the following third-party services to operate and improve the Service. Each has its own privacy policy governing their use of your data:

• Supabase — database, authentication, and file storage. Your data is stored on Supabase-managed infrastructure.
• Vercel — hosting and deployment platform. Vercel processes request logs and edge network data.
• Analytics providers — we may use analytics tools to understand how users interact with the Service. These tools may collect anonymized or aggregated usage data.
• Payment processors — payment information is collected and processed directly by our payment providers. We do not store full payment card details on our systems.

Data sharing and disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers — with vendors who assist in providing the Service, subject to confidentiality obligations
• Legal requirements — when required by law, subpoena, or other legal process, or to protect the rights and safety of CRYTCL, our users, or others
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you
• With your consent — in any other circumstances where you have provided explicit consent

Data controls

The Service provides you with controls over your personal information and how it is used. You can access these controls through your account settings:

• Export your account data and history
• Delete specific content or your account entirely
• Opt out of your content being used to improve or train AI models (where applicable)
• Update your communication and notification preferences
• Manage cookie preferences

For requests not addressed through account settings, contact us at legal@crytcl.com.

Data retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, security, or legitimate business purposes such as fraud prevention, financial record-keeping, or compliance with a legal obligation.

Your rights

Depending on your location, you may have certain rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to certain exceptions
• Portability — request a machine-readable copy of your data
• Objection — object to certain processing of your information
• Withdraw consent — where we rely on consent as the legal basis for processing

To exercise any of these rights, contact us at legal@crytcl.com. We will respond within 30 days. To protect your information from unauthorized access or modification, we may require you to verify your identity before we can honor your request. If we cannot verify your identity, we may be unable to fulfill the request.

You may submit a rights request through an authorized agent. If you do so, the agent must present signed written authorization from you, and we may also require you to independently verify your identity. If we deny your request, you may appeal by contacting us at legal@crytcl.com with the subject line "Privacy Rights Appeal."

US state privacy disclosures

Certain US state privacy laws (including the California Consumer Privacy Act / CPRA, Colorado Privacy Act, and similar statutes) require additional disclosures. The following summarizes the categories of personal information we collect, how we use it, and how we disclose it.

We do not sell personal information or share it for cross-contextual behavioral advertising. We do not process sensitive personal information for the purpose of inferring characteristics about you. California residents may request information about our data practices by contacting us at legal@crytcl.com.

Cookie policy

We use cookies and similar tracking technologies to operate the Service and collect usage information. Cookies are small data files stored on your device.

• Essential cookies — required for authentication, security, and core Service functionality. These cannot be disabled.
• Analytics cookies — help us understand how you use the Service. You may opt out through your browser settings or our cookie preferences.
• Preference cookies — remember your settings and preferences across sessions.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

Children's privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Users between the ages of 13 and 17 must have permission from a parent or legal guardian to use the Service. If we learn we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe we have collected information from a child under 13, please contact us at legal@crytcl.com.

International data transfers

CRYTCL is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We apply the protections described in this policy to your personal information regardless of where it is processed.

Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date, and where required by law, by providing additional notice such as an email notification. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.

Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us. For data protection inquiries, you may also contact our privacy team directly.