Privacy Policy

1. What We Collect

When you create an account, we collect your email address and name (provided via Google OAuth). When you make API requests, we log usage data including token counts, model used, and timestamps for billing purposes. Payments are processed securely through Stripe. We never see or store your full card details.

2. What We Don't Collect

We do not store or log the content of your API requests or responses. Your prompts and AI outputs pass through our proxy and are not retained. We do not track your physical location. We do not have a physical office address. Crouter is a fully remote, online service.

3. How We Use Your Data

Your email is used for account authentication, billing notifications, and important service updates. Usage data is used for billing, rate limiting, and displaying your real-time dashboard. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services:

• Stripefor payment processing. Card details are handled directly by Stripe and never touch our servers. Stripe's privacy policy applies to payment data.
• Supabase for authentication and database. Your account data is stored securely.
• Anthropic and OpenAI as upstream AI providers. Your API requests are proxied to these providers. Their respective privacy policies apply to how they handle request data.
• Cloudflare for infrastructure and request routing.

5. Analytics and Advertising

We may use advertising platforms such as Google Ads or similar services to promote Crouter. These platforms may place cookies on your browser to measure ad performance and deliver relevant ads. We do not sell your personal data to advertisers. You can opt out of personalized advertising through your browser settings or the respective ad platform's opt-out tools.

6. Data Security

API keys are stored securely and encrypted. All communications happen over HTTPS. We use Cloudflare Workers for request handling, which provides enterprise-grade security at the edge.

7. Data Retention

Account data is retained as long as your account is active. Usage logs for billing are retained for 12 months. If you delete your account, we will remove your personal data within 30 days, except where we are legally required to retain it.

8. Your Rights

You can request a copy of your data, ask us to delete your account, or update your information at any time by contacting us. We will respond to data requests within 30 days.

9. Refunds

You can request a refund of your unused balance within 7 days of a deposit. The refund is issued to your original payment card. Balance already consumed through API usage is non-refundable, and the payment processing fee charged by Stripe (approximately 2.9% + $0.30 per transaction) is non-refundable, since that cost is incurred at the time of payment and is not returned to us. For full details, see our Terms of Service.

10. Changes

We may update this policy from time to time. We will notify you of significant changes via email. Continued use of Crouter after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact us at contact@crouter.dev.