Privacy Policy
Last updated: June 10, 2026
1. What Data We Collect
We collect data you provide directly and data generated by your use of the Service:
- Account data: name, handle, email address, profile photo, headline, bio, and any other information you add to your profile.
- Content data: posts, comments, project pages, messages, and other content you create or share on Crato.
- Usage data: pages visited, features used, interactions (likes, follows, votes), referral sources, browser type, and IP address.
- Payment data: if you connect Stripe for verified revenue, we receive only a token and summary data — full card details are handled by Stripe and never stored by Crato.
2. How We Use Your Data
We use your data to: provide and operate the Service; personalize your experience and feed; send transactional and notification emails (which you can turn off in Settings); improve the Service through analytics; enforce our Terms and Community Guidelines; and comply with legal obligations.
3. Third-Party Services
We share data with trusted third-party providers only as necessary to operate the Service:
- Supabase — our database and authentication provider. Your account credentials and application data are stored on Supabase infrastructure.
- Stripe— payment processing and revenue verification for project pages. Governed by Stripe's own Privacy Policy.
- Anthropic— we may use Anthropic's AI models for certain features (e.g., content moderation, suggestions). Prompts may include anonymized content data per Anthropic's usage policies.
We do not sell your personal data to third parties.
4. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. You can:
- Export your data— go to Settings → Privacy → “Download your data” to receive a full JSON export of your account data.
- Delete your account— go to Settings → “Delete account” to permanently remove your account and all associated data.
- Correct your data — update your profile information at any time from your profile page.
5. Data Retention
We retain your data for as long as your account is active. When you delete your account, your personal data is permanently deleted from our systems within 30 days, except where we are required by law to retain it for longer.
6. Cookies
We use session cookies required for authentication and security. We do not use advertising or tracking cookies.
7. Children's Privacy
Crato is not directed to children. You must be at least 16 years old to use the Service. We do not knowingly collect personal data from anyone under 16; if we learn that we have, we will delete it promptly. If you believe a child has provided us personal data, contact us at the address below.
8. Contact
Questions or data requests? Contact us at privacy@crato.network.