Privacy Policy
This Privacy Policy explains how Cropus AI ("Cropus", "we", "us", "our") collects, uses, shares and protects information when you use Cropus AI (the "Service").
By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.
1. Information We Collect
1.1 Information you provide
| Category | Examples | Why we collect it |
|---|---|---|
| Account information | Email address, password (stored hashed), display name | To create and secure your account |
| Content you submit | Prompts, uploaded images and files, chat messages, project names and instructions | To generate output and provide the Service |
| Generated content | Images, video, and text produced through the Service | To store and display your work to you |
| Payment information | Billing details, transaction history | To process payments and maintain billing records |
| Support communications | Messages you send to support | To respond to your requests |
We never see or store your full payment card number. Card details are collected and processed directly by our payment processor.
1.2 Information collected automatically
- Usage data: features used, generations run, credits consumed, timestamps
- Device and technical data: browser type, operating system, screen size, approximate location derived from IP address
- Log data: IP address, request paths, error events
- Cookies and similar technologies: see Section 6
2. How We Use Information
We use information to:
- create, authenticate and secure your account
- operate the Service and generate the output you request
- track credit balances, process payments, and maintain billing records
- provide customer support
- detect, investigate and prevent fraud, abuse, and violations of our Terms
- monitor performance, diagnose errors, and improve the Service
- send transactional messages (account confirmations, password resets, billing notices, service notifications)
- comply with legal obligations
2.1 We do not train AI models on your content
We do not use your prompts, uploaded files, or generated output to train, fine-tune, or improve any AI model — ours or anyone else's.
We analyze aggregated, de-identified usage patterns (such as which features are used most often, or where errors occur) to improve the product. This analysis does not involve reading the substance of your content.
2.2 We do not sell your personal information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
3. How We Share Information
We share information only in these circumstances:
3.1 Service providers
We use third-party providers to operate the Service. They may process your information only to perform services for us, under contractual confidentiality obligations:
| Provider type | What they process |
|---|---|
| AI model providers | The prompts and files you submit for generation, and the output returned |
| Payment processor | Billing details and transaction data |
| Email delivery provider | Your email address and the contents of transactional emails |
| Analytics provider | Usage and device data |
| Hosting and infrastructure providers | Data required to run the Service |
AI model providers process your prompts and files only to fulfill your generation request, and do not retain them to train their models on your behalf.
3.2 Legal and safety
We may disclose information if we reasonably believe it is necessary to:
- comply with a law, regulation, subpoena, court order or government request
- enforce our Terms of Service or investigate a suspected violation
- detect, prevent or address fraud, security or technical issues
- protect the rights, property or safety of Cropus AI, our users, or the public
We report apparent child sexual abuse material to the appropriate authorities as required by law.
3.3 Business transfers
If Cropus AI is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.
4. Data Retention
| Data | Retention |
|---|---|
| Account information | Kept while your account is active |
| Conversations, projects and generated content | Kept until you delete them, or until you delete your account |
| Billing and transaction records | Retained as required by tax and accounting law, typically seven years |
| Log and security data | Retained for a limited period for security and diagnostic purposes |
| Moderation records of blocked requests | Retained to enforce our Terms and prevent repeat abuse |
When you delete content in the Service, it is removed from your workspace and scheduled for deletion from our systems. Copies may persist briefly in routine backups before being overwritten.
When you delete your account, we delete or de-identify your personal information, except where we are required to retain it by law or need it to resolve a dispute or enforce our agreements.
5. Data Security
We use industry-standard safeguards to protect your information, including:
- encryption in transit (TLS) and at rest
- hashed password storage — we never store passwords in plain text
- row-level access controls so each account can access only its own data
- signed, time-limited URLs for access to stored media
- restricted internal access on a need-to-know basis
No system is perfectly secure. We cannot guarantee absolute security, and you share information with us at your own risk. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.
5.1 Data location
Our infrastructure operates across multiple regions. Your information may be processed and stored in the United States and in other countries where we or our service providers operate. By using the Service, you consent to this processing.
6. Cookies and Analytics
We use cookies and similar technologies for:
- Essential purposes: keeping you signed in, maintaining session security, remembering preferences. These cannot be disabled without breaking the Service.
- Analytics: understanding how the Service is used so we can improve it.
You can control cookies through your browser settings. Blocking essential cookies will prevent you from signing in.
We honor Global Privacy Control (GPC) signals where applicable.
7. Your Rights and Choices
Regardless of where you live, you can:
- Access and update your account information in Settings
- Delete individual conversations, projects and generated content at any time
- Delete your account and associated data
- Export your content
- Opt out of non-essential communications
To exercise a right that isn't available in the interface, contact support@cropus.ai. We will respond within the time required by applicable law.
7.1 California residents (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what categories of personal information we collect, the purposes, and the categories of third parties we disclose to — described in Sections 1 through 3 above
- Access the specific pieces of personal information we hold about you
- Delete your personal information, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising
- Limit the use of sensitive personal information — we do not use sensitive personal information for purposes requiring a limitation right
- Non-discrimination — we will not deny service, charge different prices, or provide a different level of service because you exercised a privacy right
To make a request, email support@cropus.ai with the subject line "California Privacy Request". We will verify your identity using your account email before fulfilling the request. You may designate an authorized agent to act on your behalf with written authorization.
7.2 Other U.S. state privacy laws
Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah and Texas) have similar rights of access, correction, deletion and portability, and the right to appeal a denied request. Use the same contact address above.
8. Third-Party Links
The Service may link to third-party websites and services. This Policy does not apply to them. Review their privacy policies before providing information.
9. Changes to This Policy
We may update this Policy. If we make material changes, we will notify you by email or through the Service before they take effect. The "Last updated" date at the top shows when this version was issued. Continued use after the effective date constitutes acceptance.
10. Contact
Questions, requests, or privacy concerns: