Cruxes
Privacy and Security
How Cruxes handles your data, in plain English.
Your rights under GDPR
| Right | How to exercise it | Response time |
|---|---|---|
| Right to access | Email privacy@cruxes.io and we will send you a copy | Within 30 days |
| Right to rectification | Change a decision in the app, or email privacy@cruxes.io to correct anything else | Within 30 days |
| Right to erasure | Email privacy@cruxes.io to delete specific decisions or your whole account | Within 30 days |
| Right to data portability | Email privacy@cruxes.io and we will send a machine-readable copy | Within 30 days |
| Right to object | Disconnect any integration, or email privacy@cruxes.io | Within 30 days |
| Right to withdraw consent | Disconnect any integration, or email privacy@cruxes.io | Within 30 days |
What we store
- Your decisions: Questions, options, evidence, and outcomes. Stored in our database. You own the IP. Deleted on request.
- Your context answers: The onboarding questions about your company. Stored so agents can personalize. Deleted on request.
- Agent outputs: Briefs, memos, and drafts produced by your agents. Stored in your Data Room, which the Cruxes mobile app shows. Deleted on request.
- Integration tokens: OAuth tokens for Google, GitHub and Hugging Face. Calendar is not a separate connection: if you allow it, read access to your calendar is a permission on the same Google token as Drive. Stored encrypted. Revocable at any time.
- Slack: If you install the Cruxes Slack app, we store the workspace's bot token (encrypted) and the link between each person's Slack user and their Cruxes account. Cruxes reads only what it is pointed at: the thread it is mentioned in, a message the shortcut is used on, up to 30 recent messages for /crux in a channel it was invited to and text pasted after /crux. The messages it reads, including other people's words and their display names, go to our model providers to find the cruxes, and each crux's title, question, options and the quoted sentences, which are other people's words, with the first 70 characters of the conversation's first message, go to the decision-ranking service we use to recommend an option, and the sentences that raised each crux are stored in the account of the person who asked, along with the first 70 characters of the conversation's first message as the title and citation. The result is posted back to the conversation, so anyone who can see it there sees the quotes, and anyone in that channel can press a button to record a choice. Results count against the asking person's own Cruxes. Removing the app deletes the stored bot token and stops all reading; the links between Slack users and Cruxes accounts, and the sessions already saved, stay in the accounts that own them until deleted on request, like any other decision.
- Device tokens: Authentication tokens for your mobile devices. Stored hashed. Revocable per-device.
What we do NOT do
- NEVER Sell your data to third parties
- NEVER Train models on your data
- NEVER Show your decisions to other people unless you share them yourself, for example with a share link
- NEVER Use your data for marketing
Website analytics and cookies
The site uses Vercel Web Analytics and Google Analytics for aggregate page statistics. Google Analytics sets cookies (named _ga and _ga_ followed by an identifier) on your first visit, and both services can see the address of each page you open. We do not send them what you type. Share links carry the shared content inside the link itself, so share them only with people you trust. Blocking google-analytics.com and googletagmanager.com in your browser stops Google Analytics only. Vercel Web Analytics has no opt-out on the site yet. Signing in sets the cookies Auth.js needs to keep you signed in.
Google Analytics does not load if you are in the UK, the EU, the EEA or Switzerland, if we cannot tell where you are, if your browser sends Global Privacy Control or Do Not Track, or if you have turned analytics off on the privacy choices page.
Chrome extension
When you click Find Cruxes in the Chrome extension, it sends the title, address and readable text of that tab to Cruxes, and we send the text to the model providers listed below to produce your questions. Some extension versions also send the text to Pangram, a service that checks whether text was written by AI. The extension keeps its sign-in token in your browser.
The no-signup agent trial
A coding agent can try the Cruxes check without an account. The text the agent sends (what you asked for, what it is about to do and the goal) is passed to the model providers listed below and to the decision-ranking service we use, to produce the result. We do not save that text or the result, and we do not link it to a person. To limit use, we keep a count of calls per address, stored as a keyed hash rather than the address itself. That count is deleted automatically a day or more after it expires. We also keep the token counts of each call, with no name or account attached.
Data retention
- Standard sessions: Deleted automatically 365 days after your last activity in them, with the messages, decisions, comments, votes, experiments and event records derived from them
- Confidential sessions: Files you upload and documents you link start confidential, and are deleted automatically 180 days after your last activity in them
- Data Room items: The briefs, memos and drafts your agents produce are kept separately from sessions. The automatic deletion above does not remove them; we delete them on request
- Deleting a session: You can delete any session yourself at any time, and it is deleted at once
- Your account: There is no button to delete your account yet. Email privacy@cruxes.io and we delete your account and its data within 30 days
Access requests
If you ask for access to the private preview, we collect your business email, your LinkedIn profile link and what you plan to use Cruxes for. We use them only to decide who gets access, keep them in our database, where only the team reviews them, and delete them when the preview ends or when you ask us to.
Security measures
- All traffic encrypted with TLS
- Device tokens stored hashed (SHA-256), never plaintext
- Tokens for connected apps encrypted at rest
- Database access restricted to the application layer
- Agents start at the Supervised level: scheduled agent loops run without asking each time, and follow-on actions never start on their own. Lockdown stops every loop
- Deploy signals monitored for anomalies
- Infrastructure health monitored with automated alerts
Subprocessors and where your data lives
The same list as the Subprocessors section of the Terms. Services marked optional are never used on confidential sessions.
| Provider | What for | Location |
|---|---|---|
| Vercel AI Gateway | routes your content to the AI model that answers it, including Claude models from Anthropic | Varies by model provider |
| OpenRouter | routes your content to the AI model that answers it, including Claude models from Anthropic | Varies by model provider |
| OpenRouter web search | searches the web for your question when you turn it on; optional | Varies by provider |
| Google (Gemini API) | AI models | Varies by provider |
| Google Cloud Vertex AI | Gemini models, when we use it | Varies by provider |
| Amazon Web Services (Bedrock) | AI models, including Claude models from Anthropic, when we use it | Varies by provider |
| TypeSafe (Jev) | the decision-ranking service that recommends an option; receives each crux's title, question, options and the sentences quoted in it | Varies by provider |
| Not Diamond | chooses which AI model answers, when we turn it on; optional | Varies by provider |
| Pangram | checks whether text was written by AI; optional | Varies by provider |
| Google (speech synthesis) | reads answers aloud; optional | Varies by provider |
| Cursor | runs coding agents you start; optional | Varies by provider |
| Hugging Face | only if you connect your Hugging Face account; optional | Varies by provider |
| Slack | only if you install the Cruxes Slack app | Varies by provider |
| Vercel | application hosting and aggregate page statistics | Global edge |
| Neon | the database that stores your sessions and account | US East (AWS us-east-2) |
| Stripe | payments; receives no content | Hosted by the provider |
| Cloudflare (Turnstile) | the bot check before a free try; sees your address and browser details, no content | Global edge |
| Google Analytics | aggregate page statistics, where it is allowed to load; receives no content | Varies by provider |
| Google (your account) | files you connect stay in your own Google Drive | Your own Google Drive |
Intellectual property
You own every decision, document, and artifact you create in Cruxes. We claim no IP rights over your content. Our systems process your data to provide the service; that processing does not transfer ownership. Your data is yours, full stop.
Contact
Privacy requests: privacy@cruxes.io
Security reports: security@cruxes.io
Response time: within 30 days
Cruxes is operated by OutdoorAGI Inc.