Privacy

Effective date: 11-08-2025

Scope.

This policy covers (i) the CRANQ Chrome extension and (ii) the CRANQ website at cranq.ai (together, the “Services”). It explains what we collect, how we use and share it, how long we keep it, security measures, and your rights.

1) What we collect (extension)

Content you open on X (Twitter): public post text, basic metadata (e.g., author handle, timestamps) and the URL of the page currently open in your tab. Used only to provide on‑page suggestions and ranking. We do not collect your general browsing history.
Your inputs: reply drafts you explicitly generate with CRANQ and optional feedback (e.g., thumbs up/down).
Account & authentication: email, name (if provided), organization, and subscription status.
Diagnostics: crash logs, performance data and basic event telemetry (e.g., feature usage counts).
Device/technical: browser version, extension version, locale.

2) What we collect (website)

Account & billing details when you sign up or manage a subscription.
Support requests and messages you send us.
Cookies & analytics (website only). See our Cookie Notice.

3) Why we collect it (purposes)

• Provide core features (generate suggestions you request, influencer feed, ranking).
• Improve quality, reliability and security (debugging, abuse prevention).
• Account management, billing and customer support.
• Comply with legal obligations.

We only use data in line with these stated purposes and your choices.

4) Data we don’t collect or sell

• We do not sell personal data.
• We do not collect your general browsing history unrelated to our features.
• We do not read your direct messages or private content on X.
• We do not use data for creditworthiness or lending.

5) Sharing

We share data only with:
Service providers (cloud hosting, diagnostics analytics, and an LLM provider to generate your requested suggestions), bound by contract to use data solely to deliver our Services.
Legal & compliance when required by law or to protect rights, security and integrity.
No third‑party ad networks; no cross‑context behavioral advertising. We do not use Google OAuth or Google user data obtained via Google APIs.

6) Legal bases (UK/EU)

Where UK/EU laws apply, our legal bases include contract (to deliver requested features), legitimate interests (security, diagnostics), and consent where required (e.g., optional analytics cookies on the website).

7) Retention

Reply drafts & context: up to 90 days unless you save them to your account.
Diagnostics: up to 12 months (aggregated thereafter).
Account/billing records: as required by law.
We delete or anonymize data when it’s no longer needed for the purposes above.

8) Security

We use transport encryption (HTTPS/TLS), encryption at rest where supported, least‑privilege access, and regular access reviews. Sensitive data is transmitted securely.

9) Your rights & choices

In‑product controls: enable/disable features; uninstall at any time.
Access/Deletion/Export: email support@cranq.ai or use /support to request a copy or deletion of your data. We’ll verify your identity before completing requests.
Consent withdrawal: you may withdraw consent for optional processing (e.g., analytics cookies) at any time.
UK/EU: you may have rights to access, correct, delete, restrict or object to processing, and data portability. You can also complain to your local supervisory authority.
California: we honor access, deletion and correction rights; we don’t “sell” personal information.

10) Children

CRANQ is not intended for children under 16. We do not knowingly collect children’s personal data.

11) Changes

We’ll post updates on this page and update the “Effective date.” Significant changes will be notified in‑product or by email where appropriate.

12) Contact

Controller: CRANQ LTD, 483 Green Lanes, London N13 4BS
Email: support@cranq.ai
DPO/Privacy contact: support@cranq.ai
This document is provided for general informational purposes and does not constitute legal advice.