Last Updated: October 2025

‍
Crstl Technologies, Inc. (“Crstl”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website at www.crstl.ai and any web-based tools and services we provide (collectively, the “Services”).

We may update this Policy from time to time. We will notify you of material changes by updating the date above and, where appropriate, by additional notice.

Data Controller and Contact

Crstl Technologies, Inc.
148 28th Street, San Francisco, CA - 94131
‍
Email: privacy@crstl.so

‍If you have questions about this Policy or wish to exercise your data rights, please contact us at the email above.

Information We Collect

We collect the following types of personal data:

- Consumers: Name, email address, phone number, address.

- Business Users: Name, business name, job title, business email, postal/billing address, phone number, account credentials.

- Automatically: IP address, browser type, device information, usage data, cookies.

- From Third Parties: Data from services you integrate or direct us to access.

We may also receive Business Customer Information from Business Users acting as data controllers. In such cases, Crstl processes this data solely as a data processor on behalf of the Business User.

Legal Bases for Processing (EU/UK Users)

We process your personal data under the following lawful bases:

- Contract: To provide the Services you request.

- Legitimate Interests: To operate, secure, and improve our Services.

- Legal Obligation: To comply with applicable laws and respond to lawful requests.

- Consent: For certain marketing and analytics activities, where required.You may withdraw consent at any time.

Use of Information

We use the information we collect to:

- Provide, maintain, and improve our Services;

- Respond to inquiries and provide support;

- Send administrative and marketing communications (with your consent, where required);

- Prevent fraud and ensure security;Comply with legal obligations;

- Conduct research and development;

- Fulfill other purposes disclosed at the time of collection or with your consent.

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of data and the context of processing.

Data Sharing

We share data as necessary with:

- Service providers and vendors who process data on our behalf under strict contractual obligations;

- Third parties you direct us to interact with;

- Authorities where required by law;

- Successors in the event of a merger, acquisition, or sale;

- Affiliates and subsidiaries under common control;

- Others with your consent.


We do not sell personal data.

International Data Transfers

Your personal data may be transferred to and processed in the United States and other countries that may not have equivalent data protection laws. Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to protect transferred data.

Your Rights (EU/UK Users)

If you are in the EU or UK, you have the following rights under the GDPR:

- Access: Obtain a copy of your personal data.

- Rectification: Correct inaccurate or incomplete data.

- Erasure: Request deletion of your data (“right to be forgotten”).

- Restriction: Limit how we process your data.

- Portability: Receive your data in a structured, machine-readable format.

- Objection: Object to processing based on legitimate interests or direct marketing.

- Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@crstl.so.

You also have the right to lodge a complaint with your local supervisory authority (e.g., find yours here).

Cookies and Tracking

We use cookies and similar technologies to operate and improve our Services. You can control cookies through your browser settings. Disabling cookies may affect functionality.

Children’s Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us to request deletion.

Links to Third Parties

Our Services may link to external websites. We are not responsible for their privacy practices. Please review their policies before sharing data.

Contact Us

If you have questions about this Policy or wish to exercise your rights, contact us at: privacy@crstl.so