Privacy Policy

Account details. Your email address, and if you sign in with Google, the name and email Google shares with us. Passwords, where used, are stored only as salted hashes.

Your content. The documents you upload (and text we extract from them), your questions and the answers, notes, highlights, flashcards, quiz and blurting results.

Payment details. Payments are processed by Stripe. We never see or store your card number; we keep only your plan and subscription status.

Technical data. Standard server logs and usage counters (for example, how many questions your plan has used). We also use Google Analytics to understand how the site is used: pages visited, rough region, device type. We do not run advertising trackers.

Only to run the service: storing your documents, answering your questions, generating your study materials, enforcing plan limits, sending account emails, and keeping the service secure. We do not sell your data, and we do not show ads.

Answering a question requires sending the question and relevant excerpts of your document (and, for pages with figures, an image of the page) to our AI providers: OpenAI for answers and search indexing, and Mistral for reading scanned pages. Both process this data under their API terms, which do not permit training their models on it. Every quoted citation in an answer is checked against your document on our servers before it is shown to you.

The no-account trial uses a temporary session cookie. Anything you upload without an account is deleted automatically after 24 hours, unless you sign up first, in which case it moves to your account.

CruxDoc runs on infrastructure in the United States (our servers, database, and file storage are in US regions). If you are in the EU or UK, this means your data is processed in the US.

Your documents and study materials stay until you delete them. Deleted documents go to a trash with a 30-day restore window, and are then permanently purged. Anonymous trial uploads are deleted after 24 hours. If you delete your account, we delete your content.

Your sign-in session and the temporary trial session are essential cookies. Google Analytics sets its own cookies to measure visits (see above); we use it for understanding the site, never for advertising. Your theme preference is stored in your browser, not on our servers. There are no advertising cookies.

Only the processors needed to run the service: OpenAI and Mistral (AI processing, as described above), Stripe (payments), Google (sign-in if you choose it, and Google Analytics for usage measurement), our hosting and database providers (Render and Supabase, US regions), and our email provider for account emails. We may also disclose data if the law genuinely requires it.

Data is encrypted in transit, access is scoped so accounts can only reach their own rows at the database level, and uploaded files are validated and scanned before they are stored alongside other users' content.

You can access and delete your content in the app at any time, and export your flashcards. For anything else (a copy of your data, account deletion, a correction, or a question this page does not answer), email support@cruxdoc.com and we will respond within 30 days.

CruxDoc is not directed at children under 13, and we do not knowingly collect their data.

If we change this policy in a way that matters, we will update this page and the date above, and for significant changes we will tell you by email or in the app.