Privacy Policy

This Privacy Policy explains how [Legal Entity Name] ("Crustoff", "we") collects, uses, and shares information in connection with the Crustoff platform at crustoff.app and the API at api.crustoff.app (the "Service").

1. Information We Collect

• Account information. When you sign up, our authentication provider (Supabase) processes your email address and authentication credentials. We store a profile linked to your account.
• API keys. We store a one-way hash of your API keys (not the key itself) plus a short display prefix.
• Usage metadata. For each request we record metadata such as the model used, token counts, computed cost, timestamps, status, and limited technical data (e.g., for rate limiting and abuse prevention). By default we do not store the content of your prompts (Inputs) or the model responses (Outputs) — only counts and metadata.
• Payment information. Payments are processed by Stripe. We do not receive or store full payment-card numbers; we retain transaction records (e.g., amount, status, and an identifier) for billing and accounting.
• Cookies / local storage. We use cookies and browser storage necessary to keep you signed in (via Supabase) and to operate the site.

2. How Your Prompts and Outputs Are Processed

To generate a response, your Inputs are transmitted to GPU inference infrastructure (including third-party GPU providers such as RunPod) where they are processed transiently to produce Outputs. We do not use your Inputs or Outputs to train models, and we do not log their content by default. We may process limited content where necessary to investigate abuse, comply with law, or where you opt in to a feature that requires it.

3. How We Use Information

• To provide, operate, and secure the Service and process your requests;
• To meter usage, manage credits, and process payments;
• To prevent fraud, abuse, and violations of our Terms;
• To provide support and communicate with you about the Service; and
• To comply with legal obligations and enforce our agreements.

4. Service Providers (Subprocessors)

We share information with vendors that help us run the Service, including:

• Supabase — authentication, database, and storage.
• Railway — application hosting.
• RunPod (and similar GPU providers) — model inference compute.
• Stripe — payment processing.

These providers process information on our behalf under their own terms and privacy policies. We may also disclose information if required by law or to protect our rights, users, or the Service.

5. Data Retention

We retain account and usage metadata for as long as your account is active and as needed for billing, security, and legal compliance. We retain transaction records as required by law. You may request deletion of your account; some records may be retained where required.

6. Security

We use measures such as encryption in transit, hashed API keys, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at [privacy@crustoff.app].

8. International Data Transfers

We and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

9. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect their personal information.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be indicated by updating the "Last updated" date above.

11. Contact

Questions about this Policy or your data: [privacy@crustoff.app].