Introduction

This Privacy Policy describes how Crow AI ("we," "us," or "our") collects, uses, and shares information when you use our website and AI chat service at https://crowai.de (the "Service"). By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

This policy applies to information we collect through the Service. It does not cover third-party websites or services that you may access through links on our site, including payment processors and social media platforms.

Who we are

Crow AI is operated by an individual based in New Delhi, India. For the purposes of applicable data protection laws, Crow AI is the data controller of personal information collected through the Service.

Website: https://crowai.de | Contact: noreply@crowai.de

Information we collect

We collect the following categories of information:

• Account information: email address (for magic-link sign-in), a unique user identifier, and profile information received if you sign in with Discord (such as your Discord username and email, as provided by Discord).
• Chat and conversation data: messages you send and receive, conversation metadata, and derived memory data (such as extracted facts, relationships, and embeddings) used to maintain context in character conversations.
• User-created content: custom characters and personas you create, including names, personality details, research data, and avatar images you upload.
• Guest session data: if you use the Service without signing in, up to 20 messages may be stored locally in your browser. This data is not stored on our servers until you create an account and your session is merged.
• Subscription and usage data: your plan type (free or pro), subscription status, Polar customer and subscription identifiers, message usage counts for rate limiting, and preferences stored in your browser (such as theme and selected AI model).
• Technical data: authentication session cookies required to keep you signed in, limited server error logs, and privacy-focused web analytics (page views and performance metrics via Vercel Analytics). We do not use advertising tracking tools on the Service.
• Payment metadata: when you subscribe, we receive subscription status and identifiers from our payment provider. We do not collect or store your payment card details.

How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Service, including AI chat, character creation, and memory features.
• Authenticate you and manage your account via email magic links and Discord sign-in.
• Process subscriptions and manage your plan through our payment provider.
• Send transactional emails, including magic-link sign-in emails through Supabase.
• Enforce usage limits, prevent abuse, and protect the security of the Service.
• Respond to your inquiries and support requests.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information. We do not use your data for cross-context behavioral advertising on the Service.

Legal bases for processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Performance of a contract: to provide the Service you request, including account management, chat, and subscriptions.
• Legitimate interests: to secure the Service, prevent abuse, enforce rate limits, and improve reliability, where those interests are not overridden by your rights.
• Legal obligation: to comply with applicable laws and respond to lawful requests.
• Consent: where required, such as for optional features or marketing communications you opt into.

Third-party service providers

We use trusted third-party providers to operate the Service. These providers process data on our behalf and only as needed to deliver their services:

• Supabase — authentication (including magic-link emails), database hosting, and data storage. Privacy policy: supabase.com/privacy
• Polar — subscription billing and payment processing. Payment card and billing details are collected and processed by Polar and its payment partners, not by Crow AI. Privacy policy: polar.sh/legal/privacy-policy
• AI inference providers (including OpenRouter, Groq, Z.AI, Cerebras, Inception Labs, and DeepInfra) — your chat messages and related prompts are sent to these providers to generate AI responses and extract memory data.
• Cloudinary — hosting of character avatar images you upload. Privacy policy: cloudinary.com/privacy
• Discord — if you choose to sign in with Discord, Discord provides us with profile information through OAuth. Privacy policy: discord.com/privacy
• Google Fonts — delivery of web fonts used for typography on the Service.

We encourage you to review the privacy policies of these third parties to understand how they handle your information.

Cookies and similar technologies

We use essential cookies to maintain your authentication session after you sign in. These cookies are required for the Service to function and cannot be disabled without losing access to your account.

We use privacy-focused web analytics through Vercel to understand aggregate traffic and page performance. This analytics does not use advertising cookies and does not track you across third-party websites. We do not use advertising cookies or other advertising tracking technologies on the Service.

The Service also uses browser local storage for guest chat history, UI preferences, and similar non-cookie local data. This data stays on your device unless you sign in and merge a guest session.

Marketing and advertising

We may promote Crow AI through influencer marketing and paid advertising on Instagram and TikTok. If you arrive at our Service by clicking an ad or link on those platforms, your interaction with the ad is governed by the privacy policies of Instagram (Meta) and TikTok, not this policy.

We do not place advertising pixels on crowai.de to measure ad performance. Any data collected by social media platforms about your ad interactions is between you and those platforms.

AI-generated content and user responsibility

Crow AI is an AI-powered chat platform. Users may create characters, personas, and conversations that can include a wide range of content. AI responses are generated automatically and may be inaccurate, incomplete, offensive, or otherwise unsuitable.

• AI outputs are for entertainment and general purposes only. They are not professional, medical, legal, financial, or other expert advice.
• Crow AI does not endorse, verify, or guarantee any user-created or AI-generated content.
• You are solely responsible for the content you submit and for how you use AI-generated outputs.
• You agree not to use the Service to generate content that violates applicable laws or the rights of others.

To the fullest extent permitted by applicable law, Crow AI and its operator disclaim all liability for user-generated content, AI-generated content, and any actions you take based on such content. Use the Service at your own risk.

Data retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Chat messages, conversations, and derived memory data are kept until you delete them or delete your account.

• Deleting individual messages or conversations removes the associated data from our systems.
• Guest session data in your browser is cleared when you sign out or when your guest session is merged into a registered account.
• Some memory data may expire automatically based on product rules (for example, low-confidence facts may decay over time).
• We may retain certain information longer if required by law, to resolve disputes, or to enforce our agreements.

To request deletion of your account and associated data, contact us at noreply@crowai.de.

Data security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the security of your email account and any devices you use to access the Service.

International data transfers

Crow AI is operated from India. Your information may be transferred to and processed in India, the United States, the European Union, and other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law (including the GDPR), we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses adopted by the European Commission or adequacy decisions.

Children's privacy (COPPA)

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or provide any personal information.

If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at noreply@crowai.de.

Your rights (GDPR / EEA and UK)

If you are in the EEA, UK, or Switzerland, you have the following rights regarding your personal data, subject to applicable law:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data.
• Restriction — request that we limit how we use your data.
• Portability — request a copy of your data in a machine-readable format.
• Objection — object to processing based on legitimate interests, including direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time.
• Lodge a complaint — file a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at noreply@crowai.de. We may need to verify your identity before processing your request.

California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information.

Categories of personal information we collect (in the preceding 12 months):

• Identifiers — email address, user ID, Discord profile information.
• Commercial information — subscription plan, purchase and subscription history.
• Internet or network activity — message usage counts, session cookies.
• User-generated content — chat messages, characters, personas, and avatars.

We use this information for the business purposes described in the "How we use your information" section above. We disclose information to the service providers listed in the "Third-party service providers" section.

We do not sell or share your personal information for cross-context behavioral advertising. We do not use your personal information for targeted advertising on the Service.

Your California rights include:

• Right to know what personal information we collect, use, and disclose.
• Right to delete personal information we hold about you.
• Right to correct inaccurate personal information.
• Right to non-discrimination for exercising your privacy rights.

To submit a request, email noreply@crowai.de with the subject line "California Privacy Request." We will verify your request as required by law and respond within the timeframes specified by the CCPA/CPRA.

California Online Privacy Protection Act (CalOPPA)

In accordance with CalOPPA, we disclose the following:

• We collect the categories of personally identifiable information described in the "Information we collect" section above.
• We share information with the third-party service providers described in the "Third-party service providers" section, solely to operate the Service.
• Users may review and request changes to their personal information by contacting us at noreply@crowai.de.
• We do not respond to Do Not Track signals because we do not track users across third-party websites.
• This Privacy Policy's effective date is shown at the top of this page.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

For material changes, we may also notify you by email or through a notice on the Service where appropriate.

Contact us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a concern, contact us at:

Email: noreply@crowai.de

Website: https://crowai.de

Crow AI — New Delhi, India

See also: Terms of Service