Working draft This policy is a working draft pending legal review. It reflects how the service operates today and will be finalised before launch.

1. Overview

Crystal AI Club ("we", "us") operates crystalai.club. We respect your privacy and collect only what we need to run the service. This policy explains what we collect, why, and the choices you have.

2. Information we collect

We collect the following:

  • Account information — the email address and display name you provide when you sign up.
  • Subscription details — your current plan, billing status, and renewal dates.
  • Activity data — the tools you open, guides and courses you view, and posts you make in the community.
  • Technical data — IP address, browser type, and device information, collected automatically when you visit the site.
  • Communications — messages you send us by email or the support form.

3. How we use your information

We use your information to:

  • Provide and maintain your account and access to member tools.
  • Process payments and manage your subscription.
  • Send the monthly drop, the newsletter, and essential service emails.
  • Improve the service, fix problems, and keep the platform secure.

4. Payments

All payments are processed by Stripe. We never see or store your full card number. Stripe handles your payment details under its own privacy policy.

5. Service providers

We share data only with the providers that help us run the service:

  • Supabase — database, authentication, and hosting of your account data.
  • Stripe — payment processing and billing.
  • Resend — delivery of transactional and newsletter emails.
  • Analytics — privacy-respecting traffic measurement.

We do not sell your personal data, and we never share it for advertising.

6. Cookies & local storage

We use your browser's local storage to remember your theme, language, and login session. We do not use third-party advertising or tracking cookies.

7. Data retention

We keep your data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we must keep records for legal or accounting reasons.

8. Your rights

You can ask us to:

  • Access the personal data we hold about you.
  • Correct information that is wrong or out of date.
  • Delete your account and personal data.
  • Export your data in a portable format.
  • Object to or restrict certain processing.

To exercise any of these, email hello@crystalai.club. We respond within 30 days.

9. Security

We protect your data with encryption in transit, access controls, and trusted infrastructure providers. No system is perfectly secure, but we work to keep your information safe.

10. Children's privacy

Crystal AI Club is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will remove it.

11. Changes to this policy

We may update this policy as the service evolves. Material changes will be announced by email or on this page, with the date above updated.

12. Contact

Questions about privacy? Email hello@crystalai.club — a real person reads every message.