Privacy Policy

This Privacy Policy explains what information Crystal (“we”, “us”) collects, how we use it, and the choices you have. It applies to our websites, products, and services that link to this notice. By using our services, you agree to the practices described here.

For the purposes of data protection laws, Crystal acts as the controller for personal data processed under this Policy.

• Account & contact data (e.g., name, email, company, role) when you join the waitlist, sign up, or contact us.

• Usage data such as pages viewed, links clicked, device/browser information, and approximate location derived from your IP address.

• Support & communications including messages you send to us and metadata needed to respond.

• Logs and diagnostics to keep our services reliable, secure, and to troubleshoot issues.

• Provide and improve our products and websites.

• Communicate with you about updates, security notices, and service messages.

• Process requests you initiate (e.g., waitlist, demos, support).

• Maintain security, prevent abuse, and enforce our terms.

• Respect legal obligations and respond to lawful requests.

Where required, we rely on the following legal grounds: your consent; performance of a contract or steps at your request; compliance with legal duties; and our legitimate interests (for example, running secure, useful services and communicating with users in a proportionate way).

We share personal data only as needed with trusted service providers (e.g., hosting, analytics, customer support) under written agreements, or when required by law. If we are involved in a merger, acquisition, or asset sale, we’ll take steps to protect your information and notify you where appropriate.

If we transfer personal data across borders, we use appropriate safeguards recognized by applicable law (such as standard contractual clauses) to protect it.

We keep personal data only as long as it’s needed for the purposes described above or to comply with legal, accounting, or reporting duties. When data is no longer required, we delete or de-identify it according to our policies.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to certain uses, and to receive a copy of your data in a portable format. Where we rely on consent, you can withdraw it at any time. You may also have the right to lodge a complaint with your local supervisory authority.

We use cookies and comparable tools to run our site, remember your preferences, measure performance, and improve the experience. You can manage cookies in your browser settings. Some features may not work properly without certain essential cookies.

Our services are not directed to children, and we do not knowingly collect personal information from individuals under the age required by applicable law.

We apply technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. No system is perfectly secure, but we work continuously to strengthen our safeguards.

We may update this Privacy Policy from time to time. If we make material changes, we’ll post the updated version here and adjust the effective date below.

Effective date: September 14, 2025