Privacy Policy
Information We Collect
We collect:
Account & Business Information
Business name, contact name, email, phone number, business location, service/offering details, review platform URLs, and uploaded materials.
Subscription & Billing Information
Name, email, phone number, subscription status, and payment confirmation data from payment processors. We do not store full card or banking details.
QR & Platform Activity
QR scan logs, session timestamps, interaction metadata, and basic usage analytics.
Technical Information
IP address, device/browser metadata, approximate location, cookies, and similar technologies used for security, session management, and analytics.
Generated Interaction Data
Generated outputs are based solely on inputs provided through the Platform and are not derived from scraping third-party review platforms.
We do not use behavioral advertising trackers and we do not sell personal information. The Platform is not intended for individuals under 18 and we do not knowingly collect personal information from minors.
How We Use Information
We use information to:
- Provide subscription access, including any applicable promotional or trial access
- Authenticate OTP login
- Deliver QR workflows and Platform features
- Generate editable narrative suggestions
- Process billing and payments
- Provide customer support
- Improve performance and reliability
- Prevent fraud, abuse, and misuse
- Comply with legal obligations
Legal Bases for Processing (GDPR)
Where applicable, we process personal data based on:
- Performance of a contract
- Legitimate business interests (security, improvement, fraud prevention)
- Compliance with legal obligations
- Your consent, where required
Sharing of Information
We may share personal information with service providers only as necessary to operate the Platform, including:
- Payment processors
- Cloud hosting providers
- Communication providers (for OTP and support)
- Analytics providers using anonymized or aggregated usage data
These providers are contractually required to protect data. We do not sell or rent personal information.
Data Retention
We retain personal data for the duration of an active subscription and up to 90 days after termination, unless a longer period is required by law or you request earlier deletion. Deletion requests are typically processed within 15 business days.
Security
We use reasonable administrative, technical, and organizational safeguards including SSL encryption, secure hosting, access controls, and monitoring. No system can guarantee absolute security.
End-Customer Data Responsibility
Where businesses collect inputs from their customers using the Platform, the business is responsible for obtaining any required notices and consents. -C-R-U-D- processes such data solely to operate the Platform.
Cookies & Controls
Cookies are used for essential functionality, security, and analytics. You may control cookies through your browser settings; disabling certain cookies may affect Platform functionality. See our Cookie Policy for details.
International Data Transfers
Your information may be processed in jurisdictions where our service providers operate, which may have data protection laws different from your local jurisdiction.
Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Request data portability
- Withdraw consent where applicable
California residents may request information about categories of data collected and deletion of personal information. We will not discriminate against you for exercising your privacy rights. Requests may be submitted to: team.crudreview@crudreview.com
Third-Party Platforms
We may redirect users to third-party review platforms. Their privacy practices are governed by their own policies.
Updates
We may update this Policy from time to time. Continued use of the Platform constitutes acceptance of the updated Policy.