CrossPolly Privacy Policy

Last updated: 2026-05-17 Effective date: 2026-05-17

This Privacy Policy explains what information CrossPolly ("we," "us," "our") collects, how we use it, and your choices. It applies to your use of the CrossPolly website and service (the "Service"). It is incorporated by reference into our Terms and Conditions.

1. Information We Collect

1.1 Information you provide

• Email address. Required to create an account, sign in via a one-time email login link (the Service is passwordless — there are no passwords to reset), manage your query credits, and receive transactional emails (receipts, login links, service notices).
• Payment information. Payments are processed entirely by PayPal. We never receive or store your card number, bank details, or PayPal password. From a completed payment we receive only PayPal's order/capture identifiers, the amount, and the payer email PayPal associates with the transaction (used to credit the right account and for our purchase audit trail).
• Prompts you submit. The text of every query you send to CrossPolly.
• Support correspondence. If you email us, we keep the message and our reply.

1.2 Information generated by your use

• Service output. The principles and analyses CrossPolly returns in response to your prompts.
• Usage data. Timestamps, query counts, IP address, browser type, approximate location (derived from IP), and similar technical signals.
• Cost and performance telemetry. Token counts, response times, and error logs associated with your queries.

1.3 Cookies and similar technologies

We use cookies that are strictly necessary to keep you logged in and to operate the Service. We do not use advertising cookies or third-party tracking pixels for advertising purposes.

2. How We Use Information

We use the information we collect for the following purposes only:

1. To operate the Service — authenticate you, run your queries, return results, process payments, and provide customer support.
2. To improve the Service — review prompts and outputs to evaluate quality, identify failure modes, refine prompts, debug, and enhance the principle corpus.
3. To enforce our Terms — detect abuse, fraud, scraping, or other violations of Section 5 of the Terms.
4. To communicate with you — send receipts, service notices, security alerts, and occasional product updates. We do not send marketing email from third parties.
5. To comply with law — respond to lawful requests, enforce our rights, and meet legal obligations.

We do not sell your personal information. We do not share it with advertisers. We do not use it to train external commercial models.

3. How We Share Information

We share information only with:

• Service providers who process data on our behalf under contractual confidentiality obligations: our hosting and infrastructure provider (Google Cloud), our payment processor (PayPal), our transactional email provider (Microsoft 365 / Microsoft Graph), and our LLM provider (Anthropic), which processes your prompts to generate output. Each receives only what is necessary to perform its function.
• Legal authorities when required by valid legal process, or to protect the rights, safety, and property of CrossPolly, our users, or the public.
• A successor entity in the event of a merger, acquisition, or sale of assets, subject to this Privacy Policy continuing to apply or you receiving notice and a chance to delete your account first.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. LLM Processing

When you submit a prompt, the prompt and the relevant principle corpus are sent to our LLM provider (currently Anthropic) to generate a response. The provider processes this data under its own terms; we use providers whose terms commit to not training their models on customer data by default. The prompt and response are also stored in our own systems as described in Section 5.

5. Data Retention

• Account data (email, credit balance and purchase history): retained while your account is active and for a reasonable period after closure for tax, accounting, and legal purposes.
• Prompts, responses, and usage logs: retained indefinitely for quality management and Service improvement, unless you request deletion (Section 7).
• Payment records: retained as required by tax and financial recordkeeping laws.

6. Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit, access controls on production systems, and isolation of payment data with our processor. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify you consistent with applicable law.

7. Your Choices

• Stop using the Service. Because the Service operates only with the data described above and we do not use it for advertising or sale, the primary way to opt out of our data practices is to stop using the Service. There is no separate "opt-out" because there is no secondary use to opt out of.
• Account deletion. You can request deletion of your account and associated personal data by emailing readysetdata@caterbum.com. We will delete or anonymize your data within a reasonable period, except where retention is required by law (e.g., financial records) or necessary to resolve disputes or enforce our Terms.
• Email preferences. Transactional emails (receipts, security alerts) are required for service. Any non-essential emails will include an unsubscribe link.
• Access and correction. You can update your email and account information from your account settings or by contacting us.

8. Geographic Scope

The Service is offered only to users located in the United States, and only outside the excluded jurisdictions listed in our Terms and Conditions. If you access the Service from a non-authorized jurisdiction, you do so on your own initiative and in violation of our Terms; we make no representation that the Service or this Privacy Policy complies with the laws of jurisdictions where the Service is not offered.

9. Children

The Service is not directed to children under 18 and we do not knowingly collect information from them. If you believe a child has provided us information, contact readysetdata@caterbum.com and we will delete it.

10. Changes

We may update this Privacy Policy. Material changes will be posted at https://crosspolly.com/privacy with an updated date and, for active accounts, sent by email. Continued use of the Service after changes take effect constitutes acceptance.

11. Contact

Questions about this Privacy Policy or your data:

• Email: readysetdata@caterbum.com
• Mail: Caterbum, LLC, 3048 Misty Harbor Circle, Cramerton, NC 28032