Privacy Policy

Crade is a desktop AI assistant for macOS and Windows, operated by Crade Technology OÜ, a company registered in the Republic of Estonia. This policy explains what data we process when you use Crade, and the choices you have.

1. What we collect

• Account information. Your email address, subscription plan, credit balance, and — if you subscribe to Pro — a Stripe customer identifier. Payment card details are held by Stripe, not by us.
• Conversations. Your messages (“Inputs”) and the AI's replies (“Outputs”) are saved to your account so you can return to your chat history. Inputs include the text you type, a snapshot of your active screen, and a small amount of context to help the AI give relevant answers — your active app's name (such as “Chrome” or “Excel”) and, for browsers, the page domain (such as “github.com”). Snapshots are used only to generate the reply and are not retained on Crade servers afterwards. URLs, window titles, document names, and the contents of background apps stay on your device.
• Service Quality Records. To monitor service quality and improve Crade, we keep records of your Inputs, Outputs, and the AI model used. By default these records are linked to your account. You can switch off the account link at any time in Settings → Privacy & Data — records still help us improve the service but cannot be traced back to you.
• Device information. Your operating system and version, app version, processor architecture, system locale, and a randomly generated install identifier. The install identifier is regenerated on every reinstall — it is not a stable device fingerprint.
• Diagnostic reports. If Crade encounters an error, a technical report containing the error message, stack trace, app version, and install identifier is sent to us. Diagnostic reports never contain screenshots, conversation content, or Active Context. You can switch off the account link in Settings → Privacy & Data — reports are still sent (so we can fix bugs) but without your install identifier or email.

2. When you sign in with Claude, ChatGPT, or Gemini

Crade lets you sign in with your existing Anthropic (Claude), OpenAI (ChatGPT or Codex), or Google (Gemini) account — free or paid — and use it inside the app. When you do:

• Your screenshots and AI prompts are sent directly from your computer to the provider you signed in with. Crade never receives, processes, or stores them.
• Your data is governed by the connected provider's privacy policy:
  • Anthropic — anthropic.com/legal/privacy
  • OpenAI — openai.com/policies/privacy-policy
  • Google — policies.google.com/privacy
• For cross-device access, the text of your Conversations (no screenshots) is synced to Crade's database, identified by the verified email address from your AI provider. We use this only to make your chat history available across your devices — never to run AI on it, train models, or anything else.
• We keep a daily counter of how many requests you have made through each provider, to manage limits and detect abuse. The counter is a number — it does not contain message content.

3. How AI processing works when you sign in with Crade

When you sign in with Crade, your Input is sent to OpenAI or Anthropic for AI processing, depending on your plan. Use of these providers is subject to:

• OpenAI's API data usage policies
• Anthropic's commercial terms and privacy policy

Neither OpenAI nor Anthropic trains on data sent through their API by default. Crade does not train any AI model of its own. The specific models used may change over time as better ones become available.

4. Data retention and deletion

• Conversations are kept as long as your account is active or until you delete them.
• Service Quality Records are retained for the purposes described in Section 1. Switching off the account link in Settings → Privacy & Data stops new records being linked to you; the records themselves continue (anonymously). All records linked to your account are deleted when you delete your account.
• Account information is kept while your account is active.
• Diagnostic reports are kept for a limited time to identify and fix bugs, then routinely deleted.

To delete your Crade account, email us at [email protected]. Your Conversations, Service Quality Records, Active Context history, and Account information are removed from our active systems as soon as possible after we receive your request. Encrypted database backups maintained for service continuity may retain a copy for up to 30 days, after which the backup itself rotates out automatically and the data is no longer recoverable.

We do not train AI models, so there are no “training runs in progress” we need to except from deletion. We retain only what is required to comply with legal obligations — for example, financial records related to Pro subscriptions, kept for the period required by tax law.

5. Your choices and rights

You can at any time:

• Delete your account (and all associated data) by emailing [email protected]. We'll confirm deletion as soon as possible.
• Switch off the account link on Service Quality Records and diagnostic reports in Settings → Privacy & Data.
• Sign in with Claude, ChatGPT, or Gemini to keep AI processing, screenshots, and Active Context out of Crade — only chat history text is synced, for cross-device access (Section 2).
• Request access to a copy of the personal data we hold about you, request correction, object to processing, or request portability — by emailing us.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the GDPR and equivalent laws. Our lawful basis for processing your Account information and Conversations is the contract you enter into when you create an account. Service Quality Records and diagnostic reports are processed on the basis of our legitimate interest in maintaining and improving the service, balanced against your right to opt out at any time.

If you are a California resident, you have rights under the CCPA. Crade does not “sell” or “share” your personal information for behavioral advertising, as those terms are defined under applicable privacy laws.

6. Service providers

We use trusted service providers to deliver Crade:

• Supabase — account database, authentication, and Conversation storage.
• Cloudflare — request routing, edge caching, and protection against abuse.
• Google (Gemini API) — AI processing when you sign in with Crade.
• Anthropic, OpenAI, or Google — AI processing when you sign in with their account.
• Stripe — payment processing for Pro subscriptions.
• GitHub — distribution of app updates.

These providers process data on our behalf under appropriate contractual safeguards. We do not share your data with third parties for any purpose beyond delivering the service.

7. Cookies and website analytics

The Crade website (crade.ai) uses Google Analytics 4 to understand how visitors find and use the site — for example, which pages are viewed, which countries visitors come from, and which devices they use. Google Analytics sets cookies in your browser containing an anonymous identifier. We have configured Google Analytics not to share data for advertising purposes, and we do not link website analytics to your Crade account.

The Crade desktop app does not use Google Analytics or any other third-party analytics tool.

In addition to analytics cookies, the website sets a small number of essential cookies necessary for sign-in and session management. These are required for the site to function and cannot be disabled.

You can opt out of Google Analytics by installing Google's opt-out browser add-on, configuring your browser to block third-party cookies, or using a privacy-focused browser.

8. Sensitive information

Crade is a general-purpose AI assistant, not a regulated processor of sensitive data. Please do not use Crade to process highly sensitive information such as passwords, financial account numbers, government identification, medical records, or other regulated personal data — including by leaving such information visible on your screen while sending a message.

9. Children

Crade is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them.

10. International transfers

Your data may be processed in countries other than your own — including the United States, where several of our service providers are based — under standard contractual clauses or equivalent transfer mechanisms.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. Continued use of Crade after a change takes effect constitutes acceptance.

12. Contact

Crade Technology OÜ, Republic of Estonia. Questions, requests, or concerns? Email us at [email protected].