Privacy Policy

1. Overview

This policy explains what data CrowdOS Research (“CrowdOS”, “we”) collects when you use the CrowdOS platform, websites, and APIs, how we use it, and the choices you have. A useful framing: the respondents in CrowdOS studies are synthetic — no real survey participants exist in the product, so the personal data we handle is essentially yours: your account, your billing, and the study content you submit.

2. Data we collect

• Account data — email address, display name, optional avatar, hashed authentication credentials.
• Billing data — subscription plan, wallet balance and transaction history. Card details are collected and stored by our payment processor, Stripe; we never see your full card number.
• Study content — the questions, creative assets (images/video), audience definitions, and follow-up messages you submit, and the results generated for you.
• Usage data — pages visited within the product (path only — query strings are stripped before logging), API usage counts, and study metadata, used for product analytics and abuse prevention.

We do not run third-party advertising trackers. Cookies are used for authentication and session continuity only.

3. How we use data

To operate and secure the Service, process payments, meter usage, provide support, improve the product, and meet legal obligations. Your study Inputs and Results are not used to train or evolve the synthetic persona population, and are never shared with other customers.

4. Processors and subprocessors

We use a small set of infrastructure providers to run the Service: payment processing (Stripe), database and authentication, application hosting, caching, and third-party large-language-model inference providers that process study prompts to generate responses. Each processes data only as needed to provide their service to us. A current subprocessor list is available on request at support@crowdos.ai, and a Data Processing Agreement is available for business customers.

5. Retention and deletion

Account and study data are retained while your account is active. Deleting your account from the account page permanently removes your profile and studies from the production database; residual copies in encrypted backups expire on the backup rotation schedule. Transaction records may be retained as required for tax and accounting law. You can also request deletion or a copy of your data at support@crowdos.ai.

6. Security

Data is encrypted in transit, tenant data is isolated with database row-level security, and access to production systems is restricted and audited. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by applicable law.

7. International transfers

Our infrastructure providers operate globally; by using the Service you understand your data may be processed outside your country of residence, protected by the safeguards in our agreements with those providers.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Exercise them in-product (account page) or by emailing support@crowdos.ai. The Service is not directed to children under 18.

9. Changes and contact

We will post material changes to this policy here with an updated date. Questions: support@crowdos.ai. See also our Terms of Service.