Privacy Policy

This Privacy Policy applies to the Crucialy AI website, applications, account areas, tenant workspaces, interview-preparation tools, artificial intelligence features, support channels, and related services that link to this Policy (collectively, the "Services").

Crucialy AI is a Texas-based business and online service. When you use the Services directly, we generally determine how and why your personal information is processed. If you use a workspace provided by an employer, school, customer, or other organization, that organization may control the workspace information and we may process it on the organization's instructions. Workspace owners and authorized administrators may access and manage workspace membership, content, and activity.

This Policy does not govern third-party websites, applications, or services that have their own privacy notices, even when they are linked to or integrated with the Services.

We may collect the following categories of personal information:

• Account and profile information. Name, email address, authentication identifiers, password hashes or session tokens, profile details, workspace membership, settings, and preferences.
• User Content.Projects, questions, notes, messages, uploaded files, URLs, knowledge-base materials, generated content, support requests, and other information you submit to the Services (collectively, "User Content").
• Interview and AI information. Prompts, interview questions and responses, live audio or video streams used to conduct a session, transcripts, chat history, session metadata, scores, feedback, analyses, and AI-generated outputs.
• Billing and transaction information. Plan, entitlements, usage, transaction and invoice references, purchase history, and payment status. Payment processors handle full payment-card details; Crucialy AI does not receive or store full card numbers.
• Device, log, and usage information. IP address, browser and device type, operating system, timestamps, requested pages, referring information, session activity, diagnostic logs, approximate location inferred from IP address, and interactions with the Services.
• Security and fraud-prevention information. Bot detection results, browser or device signals, provider event identifiers, confidence information, and privacy-preserving derived device identifiers used to secure accounts, prevent abuse, and enforce trial limits.

We collect information from you, your device and browser, workspace owners or administrators, authentication and payment providers, security and fraud-prevention providers, other service providers, and public URLs or integrations that you direct us to use.

You may choose not to provide certain information, but information identified as required is necessary to create an account, complete a transaction, secure the Services, or provide a requested feature.

We use personal information to:

• provide accounts, tenant workspaces, content workflows, interview sessions, AI tools, and requested features;
• authenticate users, maintain sessions, personalize settings, and administer workspaces;
• transcribe and analyze responses and generate feedback, scores, summaries, questions, and other outputs;
• process purchases, administer plans and entitlements, measure usage, and maintain transaction records;
• respond to support requests and send service, security, transactional, and policy communications;
• detect fraud, duplicate trial claims, abuse, unauthorized access, and security incidents;
• debug, monitor, maintain, evaluate, and improve the Services' reliability, safety, accessibility, and user experience;
• comply with law, enforce agreements, resolve disputes, and protect rights, safety, users, and the Services; and
• create aggregated or de-identified information that cannot reasonably be linked to an individual.

Where applicable law requires a legal basis, we process personal information as necessary to perform our contract with you, comply with legal obligations, protect vital interests, pursue legitimate interests, or with your consent.

Our legitimate interests include operating and improving the Services, supporting users, securing systems, preventing fraud and abuse, enforcing agreements, and understanding whether features work as intended. We consider the information and potential effect on your rights before relying on legitimate interests. You may withdraw consent where consent is the basis without affecting earlier lawful processing.

To provide AI-assisted and live interview features, we may send your prompts, responses, and relevant User Content to providers of AI inference, speech recognition, text-to-speech, voice, avatar, and real-time communications services. They process the information on our behalf to return the requested feature and may maintain limited operational logs under their agreements and applicable law.

Live audio or video streams may be processed during an interview. The Services may create and retain transcripts, chat history, session metadata, scores, feedback, analyses, and related results in your account or workspace.

We do not use your User Content to train Crucialy AI or third-party artificial intelligence models. Service debugging, security review, and quality evaluation are not model training.

AI output may be incomplete, inaccurate, or unsuitable for your circumstances. Crucialy AI provides interview preparation and does not make employment, admission, credit, housing, insurance, or other decisions with legal or similarly significant effects solely through automated processing.

We may disclose personal information to:

• hosting, database, storage, infrastructure, authentication, and account-security providers;
• AI, speech, voice, avatar, transcription, and real-time communications providers;
• payment, billing, email, support, monitoring, bot-detection, device-identification, fraud-prevention, and security providers;
• workspace owners and authorized administrators for information in their tenant workspace;
• professional advisers, auditors, insurers, and providers supporting legitimate business operations;
• authorities or other parties when required by law or reasonably necessary to protect rights, safety, users, or the Services;
• participants in a merger, financing, acquisition, reorganization, bankruptcy, or business transfer; and
• other recipients at your direction or with your consent.

Service providers receive information reasonably necessary for their functions and are expected to process it under appropriate contractual or legal restrictions.

We do not sell personal information for money or other valuable consideration. We do not share personal information for targeted or cross-context behavioral advertising, and we do not use personal information to profile you for decisions with legal or similarly significant effects.

We do not use your User Content to train Crucialy AI or third-party AI models. If these practices materially change, we will update this Policy and provide any notice, consent, or opt-out required by law before the new practice begins.

We use cookies, local storage, and similar technologies necessary to authenticate you, maintain secure sessions, route you to the correct tenant, remember preferences, and operate the Services. Blocking them may prevent login or account features from working.

During signup, authentication, verification, or trial-claim flows, bot-detection and device-identification providers may process browser, device, network, and interaction signals and return event or device identifiers. We use these signals to prevent fraud, identify duplicate trial claims, and protect the Services—not for advertising. We may retain provider event identifiers and privacy-preserving derived hashes needed to enforce these protections.

Because we do not sell personal information or use it for targeted advertising, an opt-out preference signal does not currently apply to those practices. We will honor legally required signals if our practices change.

We retain personal information only as long as reasonably necessary for the purposes described here, considering its nature, sensitivity, volume, risks, and legal requirements.

• Account, workspace, and User Content may be retained while active and afterward for deletion processing, backups, disputes, security, or legal obligations.
• Interview transcripts, results, and AI content may be retained for account history and requested functionality or until deletion, subject to backups and law.
• Billing records may be retained for accounting, tax, fraud prevention, disputes, and legal compliance.
• Security, device-signal, usage, and diagnostic records may be kept to investigate incidents, enforce trial limits, prevent abuse, and protect the Services.
• Support communications may be kept to resolve requests and maintain appropriate business records.

Deletion may be delayed or limited by law, security needs, unresolved transactions, legal claims, backup rotation, or others' rights. We may retain information that has been de-identified.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, tenant-aware authorization and isolation, appropriate encryption in transit, monitoring, and service-provider controls.

No security program eliminates all risk, and we cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur. Protect your credentials and contact us at info@crucialy.ai if you suspect unauthorized access.

Depending on where you live and subject to applicable law, you may request access, correction, deletion, portability, restriction, or objection. You may withdraw consent, appeal a denied request, and use an authorized agent where permitted.

Applicable law may provide rights to opt out of sale, targeted advertising, or qualifying profiling. Crucialy AI does not currently perform those activities. We will not discriminate against you for exercising a privacy right, although some information is necessary to provide requested Services.

Submit requests to info@crucialy.ai. Describe the right and account or workspace involved. We may verify your identity and an agent's authority and may deny or limit a request where an exception applies. We will respond within the period required by law. To appeal, reply with "Privacy Appeal" in the subject line.

If a customer organization controls your workspace information, we may direct you to that organization and support its response.

State privacy laws apply only when their coverage requirements are met. For laws requiring a preceding-12-month description, the categories collected, sources, purposes, and recipients are described above. They include identifiers and account data; transaction data; internet, device, and usage activity; approximate geolocation; audio, video, and interview data; User Content; inferences and AI outputs; and sensitive information you choose to include in User Content.

We collect this information from you, devices and browsers, workspace administrators, providers, integrations, and user-directed public sources. We use it for service delivery, billing, support, security, fraud prevention, legal compliance, and reliability and disclose it to the recipient categories described above.

In the preceding 12 months, Crucialy AI has not sold personal information or shared it for cross-context behavioral advertising. We do not knowingly sell or share personal information of consumers under 16 for those purposes.

Crucialy AI is based in the United States. We and our providers may process information in the United States and other countries with different privacy laws. Where required, we use recognized transfer safeguards and will provide information about them upon request.

Users in the EEA, United Kingdom, or Switzerland may have rights to access, correct, erase, restrict, port, or object and to withdraw consent. You may complain to the data-protection authority where you live, work, or believe an infringement occurred.

Your right to object to processing based on legitimate interests is specifically brought to your attention. Email info@crucialy.ai to exercise it.

The Services are not directed to children under 13, and we do not knowingly collect their personal information. Users must be at least 18 or the age of legal majority in their jurisdiction if higher.

A parent or guardian who believes a child provided information should contact info@crucialy.ai so we can review and take appropriate action.

We may update this Policy for changes in the Services, practices, or law. We will revise the "Last updated" date and, when required, provide additional notice of material changes or obtain consent. Continued use is not consent where affirmative consent is required.

Contact us with privacy questions, complaints, or rights requests: