Privacy

The short version

• This site sets no cookies and runs no analytics or trackers.
• Fonts and visual assets are bundled and served from this domain. Loading a page makes no request to a third party.
• If you use the live demo, what you type is stored for up to 7 days and then deleted automatically.
• If you email us or send a demo request, we keep that until it stops being useful, and delete it if you ask.

Who is responsible

Crudo is the data controller for this site. For anything in this policy — including a request to see or delete your data — write to philipzurborg@gmail.com.

Cookies

None. Not “essential only” — none. That is why you were not asked to dismiss a banner to read this page.

The live demo needs to remember that you entered a valid demo password. It holds that token in your browser's sessionStorage, which your browser discards when you close the tab, and which is never sent anywhere except back to the demo itself. No cookie is set, and nothing about you is stored on our side to make it work.

The live demo

The demo is a real Crudo agent running on our own machine, against synthetic data. When you use it:

• What you type is stored.The conversation is saved so the agent can follow the thread, exactly as it would in a real deployment. Please don't type real personal information into it — it's a demo, and it doesn't need any.
• It is deleted after 7 days, by an automated job, without anyone having to remember.
• Your message is not used to train anything.The model is a fixed open-weight model running locally. It does not learn from what you say, and nothing you type is sent to an AI provider — there isn't one.
• Your IP address reaches the demo machine as part of ordinary networking, and is used to rate-limit abuse. It is not stored alongside your conversation.

Our lawful basis is legitimate interest: showing prospective customers how the product behaves, which is difficult to do without letting them talk to it. If you would rather we deleted your demo conversation before the 7 days are up, email us and we will.

Text messaging (SMS)

Crudo operates phone numbers for live product demonstrations and pilot deployments. You will only ever receive a text from us if you opted in first — by texting one of our numbers yourself, or by agreeing (for example, when checking a device in for repair during a demonstration or pilot) to receive status updates by text.

• What we collect: your phone number and the content of the messages you send. SMS conversations are stored the same way demo conversations are, and deleted within 7 days.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are never shared with anyone, for any reason.
• Opting out: reply STOP to any message and you will receive nothing further. Reply HELP or email us for help.

The full program terms — message frequency, rates, and carrier disclaimers — are in our terms.

Demo requests and email

The demo request form sends us your name, email, company, and whatever you write in it — either straight to our inbox via your own mail client, or through a form endpoint if one is configured. We use it to reply to you. We don't add you to a mailing list, because we don't have one.

Who else touches your data

Vercel hosts this site and records ordinary server logs, which include IP addresses.

The live demo adds nobody. It runs on our own machine, and the encrypted connection to it terminates there rather than at some intermediary — so what you type in the demo goes to us, and to nobody in between. That is the same property the product itself is built on, and it would be a strange thing for us to compromise on our own demo.

If you text one of our demo numbers, Twilio carries and stores those messages — that is what an SMS provider is. Your mobile carrier sees them too, as with any text. Neither receives anything about you beyond the messages themselves.

Vercel is not involved in a Crudo deployment at a customer site. That is the point of the product: your customers' data stays on your hardware and never reaches us, our host, or an AI provider.

Your rights

If you are in the UK or EU, the GDPR gives you the right to ask what we hold about you, to have it corrected or deleted, to object to our processing it, and to complain to your data protection authority. Email philipzurborg@gmail.com and we will answer within 30 days. Given how little there is to hold, it is usually faster than that.

Changes

If this policy changes materially, the date at the top changes with it.