Privacy Policy.

1. Who We Are

CrowdCheck (crowdcheck.site) is operated by Delegance AI. This policy explains what data we collect, why, and how we protect it.

2. Data We Collect

Data	Purpose	Retention
Email address	Deliver your report; send job-status updates	Until you request deletion
URL submitted	Run the focus-group analysis	Stored with job record
Payment info	Process payment (handled entirely by Stripe — we never see your card number)	Managed by Stripe per their privacy policy
Generated report	Deliver and host your PDF	Available for download; deleted on request

We do not collect names, physical addresses, phone numbers, or any data beyond what is listed above.

3. How We Use Your Data

• Report delivery — Your email and URL are used solely to generate and deliver your report.
• Transactional emails — We send job status updates and report delivery emails via Resend. We do not send marketing emails.
• Service improvement — We may use anonymized, aggregate data (e.g., average report quality scores, pipeline success rates) to improve the product. Individual reports and emails are never shared.

4. Third-Party Services

We use the following services to operate CrowdCheck:

• Stripe — Payment processing. Subject to Stripe's Privacy Policy.
• Anthropic, OpenAI, Perplexity — AI/LLM providers that generate persona responses. Prompts contain the submitted URL and publicly visible page content — never your email or payment details.
• Browserbase — Headless browser infrastructure. Personas browse the submitted URL in sandboxed browser sessions.
• Resend — Transactional email delivery.
• DigitalOcean — Infrastructure hosting and file storage (Spaces CDN for PDF delivery).

5. Cookies

CrowdCheck uses only essential cookies required for the site to function:

• Django session cookie (sessionid) — maintains your session state (e.g., demo sign-in). Expires when you close your browser or after 2 weeks of inactivity.
• CSRF token (csrftoken) — protects form submissions from cross-site request forgery.

We do not use analytics cookies, tracking pixels, advertising cookies, or any third-party cookies. Stripe may set its own cookies during the checkout process, governed by Stripe's Cookie Policy.

6. Data Security

All traffic is encrypted via TLS. Payment data is handled by Stripe (PCI DSS Level 1 compliant). Reports are stored on encrypted infrastructure. Access to production systems is restricted to authorized personnel.

7. Your Rights

You have the right to:

• Access your data — request a copy of what we store about you
• Delete your data — request deletion of your email, job records, and reports
• Correct your data — request correction of inaccurate information
• Object to processing — withdraw consent at any time

To exercise any of these rights, email [email protected]. We respond within 30 days.

California residents (CCPA): We do not sell your personal information. You have the right to know what data we collect and to request its deletion.

EU/EEA residents (GDPR): Our legal basis for processing is contract performance (delivering the report you paid for) and legitimate interest (service improvement with anonymized data). You may lodge a complaint with your local data protection authority.

8. Data Retention

Job records (email, URL, report) are retained until you request deletion. Anonymized pipeline metrics are retained indefinitely. Payment records are retained per Stripe's policies and applicable tax/legal requirements.

9. Children's Privacy

CrowdCheck is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above. Continued use of the service constitutes acceptance.

11. Contact

Privacy questions or data requests: [email protected]