Introduction
This privacy policy ("Privacy Policy") outlines the rules
for using data collected when you ("you" or "your") use our
services, visit our websites including
https://ai.nahcrof.com ("Website"), use our APIs ("APIs"),
and other services (collectively referred to as the
"Services").
This policy describes the types of information we may
collect from you or that you may provide when you use our
Services, and our practices for collecting, using,
maintaining, protecting, and disclosing that information.
All capitalized terms in this Privacy Policy are defined in
the Terms of Service found on our Website.
By accessing or using our Services, you agree to this
Privacy Policy. We will notify you when we update this
Privacy Policy.
What Data We DO NOT Collect
We Explicitly DO NOT Collect:
-
Your input prompts or messages sent to our AI
services
-
AI-generated responses or outputs
-
Conversation history or chat logs
-
Content of your interactions with our AI
models
-
Any personal information contained within your
prompts
Your conversations are processed in real-time and are
not stored, logged, or accessible to us in any
way.
Information We DO Collect
We only collect the minimum information necessary to provide
our services:
-
Account Information (Required for Service):
-
Email address (for account creation and billing)
- Hashed passwords (securely encrypted)
- Account creation date
-
Subscription status and billing information
-
Usage Metrics (Required for Billing):
- Number of API requests made
-
Request timestamps (for rate limiting and
billing)
-
Service usage statistics (aggregated,
non-personal)
-
Technical Information (Required for Service
Operation):
-
IP addresses (for security and rate limiting)
-
Browser type and version (for compatibility)
- Device information (for optimization)
How We Collect Information
We collect information in the following ways:
- When you create an account on our platform
-
When you make API requests (we only log request counts,
not content)
- When you visit our website (standard web analytics)
-
When you process payments through Stripe (handled by
Stripe, not stored by us)
How We Use Your Information
We use the limited information we collect only for:
- Providing and maintaining our AI services
- Processing payments and managing subscriptions
- Monitoring usage for billing purposes
- Ensuring service security and preventing abuse
- Communicating important service updates
- Complying with legal obligations
We do NOT use your data for:
- Training AI models
- Marketing or advertising
- Selling to third parties
-
Creating user profiles beyond basic account information
Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal
information to third parties, except:
-
Service Providers: Stripe for payment
processing (they handle payment data according to their
privacy policy)
-
Legal Requirements: When required by
law, court order, or to protect our rights and safety
-
Business Transfers: In the event of a
merger or acquisition (users will be notified)
We never share conversation content because we don't
collect it.
Data Security
We implement industry-standard security measures:
- Passwords are hashed using secure algorithms
-
Limited access to personal data on a need-to-know basis
- Secure servers with regular backups
Your Rights and Choices
You have the right to:
-
Access: Request a copy of your personal
data
-
Correct: Update or correct your account
information
-
Delete: Request deletion of your
account and associated data
-
Export: Download your account data
-
Restrict: Limit how we process your
data
To exercise these rights, contact us at
[email protected]
or manage your account through our dashboard.
Data Retention
We retain your data only as long as necessary:
-
Account Data: Until you delete your
account
-
Usage Metrics: For billing and legal
compliance (typically 7 years)
-
Conversation Data: We don't retain this
- it's processed in real-time only
After account deletion, all personal data is permanently
removed within 30 days.
California Privacy Rights (CCPA)
California residents have additional rights under the CCPA:
-
Right to know what personal information is collected
- Right to delete personal information
-
Right to opt-out of sale (we don't sell data)
-
Right to non-discrimination for exercising privacy
rights
CrofAI has not disclosed, sold, or shared any personal
information with third parties for business or
commercial purposes in the past twelve (12) months, and
will not do so in the future.
International Data Transfers
Your data may be processed in the United States. We ensure
appropriate safeguards are in place for international
transfers and comply with applicable data protection laws.
Children's Privacy
Our services are not intended for children under 13. We do
not knowingly collect personal information from children
under 13. If we become aware of such collection, we will
delete the information immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will
notify you of any material changes by:
-
Updating the "Last Updated" date at the top of this
policy
Contact Information
If you have any questions about this Privacy Policy or our
data practices, please contact us:
We are committed to addressing your privacy concerns and
will respond to your inquiries promptly.