CRAWLI ONE — Privacy Policy

Version 1.0 Effective Date: May 7, 2026

CRAWLI ONE ("we," "us," "the app") is a product of Xnode Agentic LLC. This Privacy Policy describes how we handle information in connection with the CRAWLI ONE desktop application, website, and related services.

1. What stays on your machine

CRAWLI ONE is a local-first application. The following data never leaves your device:

• Your imported AI chat archives (ChatGPT, Claude, Gemini, DeepSeek, Perplexity, etc.)
• Any conversations you have with CRAWLI ONE
• Queries you make to the local AI
• Any files or attachments you add to the app
• Your local settings, preferences, and configuration

All AI inference runs locally on your hardware via Ollama. We have no access to this data, do not collect it, do not store it, and do not transmit it to any server.

2. What we do collect

We collect only the minimum information needed to operate the business:

• Your email address — provided at signup or purchase, used to deliver activation codes, license keys, and purchase-related communications
• Your tier identity and account status — which tier you're enrolled in (Waitlist, Reserved Waitlist, Early Access, Developer, or Premium), your account status (active, reserved, redeemed, cancelled, refunded, or revoked), and any associated metadata such as Early Access member number (1 of 250), Reserved Waitlist position, and badge designation
• Your license key — for paid tiers, we store an HMAC-signed license key bound to your email address. The key is also issued to you for activation in the desktop app.
• Your subscription status and payment history — managed by Stripe; we know whether your subscription is active, past due, cancelled, and which discounts (such as Diamond Member Credit) have been applied
• Payment information — processed and stored entirely by Stripe. We never see or store your card details. See Stripe's privacy policy.
• Basic web analytics on crawlione.com — aggregate page views via Cloudflare Web Analytics (cookie-free, no personal data)
• Operational logs — IP address, country, user agent, and timestamps for signup, purchase, and license verification events. Used for fraud prevention, rate limiting, and abuse detection. Retained for 30 days.

3. What we don't collect

• We do not have analytics or telemetry inside the desktop app.
• We do not track how you use CRAWLI ONE features.
• We do not collect crash reports unless you explicitly send us one.
• We do not sell, rent, or share any data with advertisers.
• We do not use your data for AI training.
• We do not access, read, or process your imported chat archives.

4. Third-party services

We use these third parties strictly for operating the business:

• Stripe — payment processing and subscription management
• Resend — transactional email delivery (activation codes, license recovery, receipts, launch announcements)
• Cloudflare — infrastructure, DNS, KV storage, content delivery, web analytics

Each has its own privacy policy. We minimize what we share with each and only share what's strictly required to deliver the service.

5. Your rights

You can request at any time:

• A copy of the data we hold about you (email, tier identity, account status, license key, subscription status, payment history via Stripe)
• Deletion of your account and all associated data
• Correction of inaccurate information

Email support@crawlione.com with your request.

6. Data retention

• Active accounts: We retain your email, tier identity, license key, and subscription data for as long as your account is active.
• Cancelled or refunded accounts: We retain core records for 7 years thereafter for tax and accounting purposes (as required by law).
• Operational logs: Retained for 30 days, then deleted.
• Deletion requests: We remove all non-legally-required data within 30 days of a deletion request.

7. Security

Your local data is protected by SQLite encryption on your device. Our server-side data is stored in Cloudflare KV and managed via Stripe. License keys use HMAC-SHA256 signing. All transmissions use TLS encryption.

8. Children

CRAWLI ONE is not intended for users under 13. We do not knowingly collect data from children.

9. Changes to this policy

We'll notify users by email and a prominent notice on crawlione.com if we make material changes. The latest version is always available at crawlione.com/privacy.

10. Contact

Xnode Agentic LLC Questions: support@crawlione.com