Privacy Policy
Last updated: March 2026
1. Who We Are
CruxIO ("we", "us", "our") is a crash investigation intelligence platform for mobile teams. This Privacy Policy explains what data we collect, how we use it, and your rights.
2. Data We Collect
- Account data — email address, name, and password (hashed, never stored in plain text).
- Crash data — stack traces, error titles, device models, OS versions, and app versions from Firebase Crashlytics, which you connect to your account.
- GitHub data — commit messages, file paths, and author names from repositories you authorize via GitHub App installation.
- Waitlist data — email, name, role, and platform preference submitted via the waitlist form.
- Usage data — pages visited, actions taken within the dashboard, and timestamps. Used to improve the product.
3. How We Use Your Data
- To provide and operate the CruxIO service.
- To analyze crash data using AI and surface insights to your team.
- To send transactional emails (account confirmation, waitlist updates). We do not send unsolicited marketing emails.
- To detect and prevent abuse, fraud, and security incidents.
4. Data Storage and Security
All data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure with encryption at rest and in transit (TLS). Firebase service account credentials and GitHub tokens you provide are encrypted using AES-256 before being stored in our database. Access to your data is governed by row-level security policies — users can only access data belonging to their organization.
5. Third-Party Services
- Supabase — database and authentication.
- Google Gemini / OpenAI — AI analysis of crash data. Stack traces are sent to the AI provider for analysis. No personal user data is included.
- Vercel — hosting and deployment.
- GitHub — commit data via GitHub App integration (only for repos you explicitly authorize).
6. Your Rights (GDPR)
If you are in the European Union, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and all associated data.
- Object to processing of your data for direct marketing.
To exercise any of these rights, email us at cruxio717@gmail.com.
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete all associated data within 30 days. Waitlist entries are retained until you request removal or we launch and migrate you to a full account.
8. Changes to This Policy
We may update this policy as the product evolves. We will notify users of significant changes via email. Continued use of CruxIO after changes constitutes acceptance of the updated policy.
9. Contact
Questions about this policy? Email us at cruxio717@gmail.com.