In short
| What | Why | Shared with |
|---|---|---|
| Your name and email | Your account, signing in, and the emails you ask for | Our email provider, to deliver mail |
| From Google, if you sign in with it: name, email, account ID | Signing you in. Nothing else | No one |
| Your brands, rivals and questions | Asking AI engines about them | The answer provider and the AI model, to do the work |
| The answers the engines give | Showing you whether you are named, and where from | The AI model, to read them |
We do not sell data, we do not show advertising, and there is no analytics or advertising tracking in Crux or on this website.
Your account
- An account is your email address and your name. You can sign in with a one-time link we email you, with a password, or with Google. A password is stored only as a secure hash, never as you typed it.
- A sign-in link works once and expires after 15 minutes. Signing in starts a session that lasts up to 30 days; we record when it started, when it was last used, and your browser's name, so you can sign out everywhere.
- When you invite a teammate, we keep their email address and the role you gave them, so the invite can be accepted.
Signing in with Google
If you choose "Sign in with Google", Google asks you to share your basic
profile with Crux. We ask for three things only: openid,
email and profile. From them we receive your Google
account ID, your email address, and your name if you share one.
- How we use it. To create your Crux account or find the one you already have, and to sign you in. Your name is shown in Crux; your email is where Crux sends your sign-in links, invites and the reports you ask for.
- How we store it. Your Google account ID, email and name are kept with your Crux account in our database. We do not ask Google for, or keep, any access or refresh token, your contacts, your files, your mail or your calendar. Crux cannot act on your Google account.
- Who we share it with. No one. Your Google account details are not sold, not used for advertising, not used to train AI models, and not passed to the AI model or answer provider Crux uses.
Crux's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What you give Crux
- The brands you track: their names and websites, the rivals you compare them with, the market and language, and the questions Crux asks for them.
- To suggest rivals and questions, Crux reads the public pages of a brand's own website. It checks each site's robots.txt first, keeps what it was allowed to read, and records what it read.
- A workspace's brands, questions and results are visible only to the members of that workspace.
The answers Crux collects
Every day, Crux asks AI engines your questions and keeps each answer with the sources it cited, so every number Crux shows can be traced back to the answer it came from. These answers are written by the engines about brands and markets, not about you. An AI model reads them to find which companies are named and in what tone; the counts themselves are made by Crux, not by the model.
- Crux emails you sign-in links and invites when you ask for them, and, for the brands you follow, a weekly report, a monthly report and short alerts.
- Each report and alert can be turned off in Brand settings → Emails, or from the link at the bottom of the email itself. We keep a record of each email sent, its subject and when, so the same email is never sent twice.
Who else handles data
Crux uses a few services to do its work. Each receives only what that work needs.
| Service | What it receives | Why |
|---|---|---|
| DataForSEO | Your questions, with their market and language | To ask ChatGPT and Google's AI Overviews and return their answers |
| Meta (the Muse Spark model) | Your brand's name, website text and rivals, your questions, and the answers collected for them | To suggest rivals and questions, and to read which companies an answer names and in what tone |
| Your email address and the emails Crux sends you | To deliver email, through Google Workspace | |
| Your sign-in, if you choose Sign in with Google | To confirm who you are | |
| logo.dev | The website addresses of the brands on your screen | To show each company's logo; your browser asks for them directly |
| Google Fonts | Your browser's request for this website's typeface | To draw the text on this website |
Your account details, including anything received from Google, are not sent to DataForSEO or to Meta. Everything else Crux stores is kept on servers we run.
Cookies
Crux sets one cookie, when you sign in: it keeps you signed in, cannot be read by scripts on the page, and ends when your session does. This website sets no cookies of its own.
How long we keep it
- Sign-in links: 15 minutes. Sessions: up to 30 days, or until you sign out.
- Records of emails sent: 180 days.
- Your account, brands, questions and the answers collected for them: for as long as your account and workspace exist.
- A question you delete is hidden from Crux at once, together with everything collected for it, but it is kept rather than erased, so a mistaken delete can be undone. Ask us and we will erase it.
- When a workspace is deleted, its data is deleted from our database. Copies of the raw answers in our file storage are removed on request; write to us.
Your choices
- Turn any report or alert off, in Crux or from the email.
- Change your name or password, and sign out of every device, in your profile.
- Ask to see the data we hold about you, to correct it, or to delete your account and everything in it. Write to us below and we will reply within 30 days.
- To stop Crux using your Google sign-in, remove Crux from your Google account's connected apps; your Crux account then signs in with email instead.
Changes and contact
Crux is made by EMIAC Technologies. When this policy changes, the date at the top changes too, and a real change is noted in the changelog. Questions, or a request to see or delete your data: write to inc@emiac.us.