Privacy Policy

1. Introduction and Scope

Welcome to CrispDemo. This Privacy Policy explains how helpful bits GmbH ("Company," "we," "us," or "our") collects, uses, discloses, and protects information about you when you use our CrispDemo desktop application, website located at www.crispdemo.com, and related services (collectively, the "Services").

CrispDemo is a desktop application (CrispDemo Studio) that turns screen recordings and screenshots of an app into marketing videos. You add recordings or screenshots, or record your screen, optionally with your microphone. CrispDemo uses Google Gemini to rebuild the app's screens, plan a story, write the script, and review the finished video; Gemini text-to-speech for narration; and Google Lyria or packaged music beds for music. Videos are rendered on your computer. A chat in the Studio runs a coding agent of your choice on your computer.

By accessing or using our Services, you agree to this Privacy Policy and our Terms of Service. If you do not agree with this Privacy Policy, please do not use our Services.

We reserve the right to modify this Privacy Policy at any time. We will notify you of material changes by updating the "Last Updated" date above and, where appropriate, by sending you an email notification or displaying a prominent notice within our Services. Your continued use of the Services after any changes indicates your acceptance of the updated Privacy Policy.

2. Company Information

CrispDemo is operated by helpful bits GmbH, a German limited liability company (Gesellschaft mit beschränkter Haftung) organized under German law, offering services to users in the United States, European Union, European Economic Area, and United Kingdom.

For users in the European Union and European Economic Area, helpful bits GmbH serves as the data controller responsible for your personal information collected through the Services.

For users in the United States, helpful bits GmbH operates subject to applicable U.S. federal and state privacy laws, including state-specific privacy regulations described in Section 10 of this Privacy Policy.

3. Territorial Scope and Location Information

Our Services are available only to users physically located in authorized territories: the United States, the European Union (EU), the European Economic Area (EEA), and the United Kingdom (UK).

3.1 Location Information We Collect

We derive your approximate country from your IP address. We do not use device location services. This happens:

• When the desktop application starts for the first time, or has no server selected, before you sign in. It asks crispdemo.com for your country and, if that fails, Cloudflare's public trace service
• When you open the Privacy Policy or Terms of Service links on our website, which use the country reported by our network provider to show the US or EU version

3.2 Use of Location Information

We use location information for the following purposes:

• Choosing whether the desktop application uses our US server (for North America) or our EU server (for other locations)
• Showing the legal documents for your region
• Complying with legal obligations and enforcing the territorial restrictions in our Terms of Service

3.3 Access Restrictions

Use of the Services from outside authorized territories is not permitted. If we determine that you are using the Services from outside authorized territories, we may:

• Restrict your access to the Services
• Suspend or terminate your account if circumvention is detected

Use of VPNs, proxies, or other technologies to misrepresent your location or circumvent territorial restrictions is prohibited under our Terms of Service and may result in immediate account termination.

4. Notice at Collection: Information We Collect

We collect several categories of information from and about users of our Services. The following table describes the personal information we collect, the sources from which we collect it, the purposes for which we use it, and whether we disclose it to third parties.

Note: CrispDemo does not ask you to enter structured sensitive identifiers such as Social Security or driver's license numbers. However, a screen recording, screenshot, microphone audio, brief, chat message, or other free-form content can contain sensitive personal information that you choose to show, say, or submit. Avoid including information that is not needed for your request.

5. How We Use Your Information

We use the information we collect for the following purposes:

5.1 Provision of Services

• Operating and maintaining the CrispDemo application and services
• Managing the recordings and screenshots you add, and recording your screen and, if you turn it on, your microphone
• With your source approval, letting the coding agent you choose read frames from your recordings and your screenshots on your computer to rebuild your app's screens
• Creating narration with Gemini text-to-speech and music with Google Lyria
• Reviewing the finished video with Gemini, unless you turn this off
• Rendering and exporting videos on your computer
• Providing the CrispDemo tools that the coding agent you choose uses in the Studio chat

5.2 Account and Billing Management

• Creating and maintaining your account
• Authenticating your identity
• Managing service settings associated with your account
• Selling credits, keeping your CrispDemo balance, and charging AI requests made through our server to it
• Providing transaction status and receipts

5.3 Communications

• Sending service-related notifications and announcements
• Responding to your inquiries and support requests
• Providing customer service and technical assistance
• Notifying you of changes to our Terms or Privacy Policy
• Sending marketing communications (with your consent where required)

5.4 Service Improvement and Development

• Analyzing usage patterns and trends to improve Services
• Developing new features and functionality
• Conducting research and analytics
• Testing and troubleshooting technical issues
• Optimizing performance and user experience

5.5 Security and Fraud Prevention

• Detecting and preventing fraud, abuse, and security incidents
• Enforcing territorial restrictions
• Rate limiting by IP address, account, and device
• Protecting against unauthorized access and use
• Investigating suspicious activity
• Maintaining system integrity and security

5.6 Legal Compliance

• Complying with applicable laws, regulations, and legal processes
• Responding to government requests and law enforcement
• Enforcing our Terms of Service and other agreements
• Protecting our legal rights and interests
• Resolving disputes and preventing prohibited activities

5.7 Aggregated and De-identified Data

We may create aggregated, de-identified, or anonymized data from information we collect. This data does not identify you personally and is not subject to this Privacy Policy. We may use such data for any purpose, including research, analytics, and marketing.

6. Desktop Application Privacy

6.1 Local Data Storage

CrispDemo stores the following on your computer:

• Project data in a .crispdemo folder inside each project folder you choose: screen recordings you make, frames taken from your sources, rebuilt screens, scripts, narration and music audio, copies of provider responses, your source approval, and rendered videos
• References to the recordings and screenshots you add (file paths and media details)
• Application preferences, a random device ID, and a local error log, in the application's data folder
• Sign-in tokens and, if you add one, your Gemini API key, in your operating system's credential store (keychain)

The recordings and screenshots you add stay at their original locations. CrispDemo does not change, move, or delete them. The local error log stays on your computer and is not sent to us.

6.2 Source Approval and What Leaves Your Computer

• Source approval: Before your coding agent builds a video from your sources, you tick a box that allows it to read your screenshots and frames from your recordings to rebuild their screens. The approval applies to the exact files attached to that project. If you change the files, you are asked again.
• Frames go to your coding agent, not to us: The agent reads still frames and screenshots through CrispDemo tools on your computer and sends what it reads to its own provider, under your account with that provider (see Section 8.3). CrispDemo does not send your recordings, frames, or screenshots to our server or to Google, and the agent's tools do not give it the recording's audio track.
• Narration and music: The narration text, language, and voice are sent to Gemini text-to-speech. A short music brief is sent to Google Lyria. If Lyria cannot create music, CrispDemo uses a music bed packaged with the application.
• Video review: After a video is rendered, CrispDemo sends a reduced copy of the finished video, including its sound, to Gemini for review, together with the scene titles and narration text of its plan. Parts of your recordings and screenshots can appear in the finished video. This setting is on by default and you can turn it off in Settings.
• Rendering and export: Videos are rendered on your computer and exported to your project folder.

6.3 Other Network Requests

The desktop application also contacts:

• crispdemo.com, and Cloudflare as a fallback, to determine your country when choosing a server (see Section 3)
• crispdemo.com to check for updates. The check sends the current application version, platform, and processor architecture
• Google Fonts, to load the fonts used in the interface
• When you are signed in, our server for your account, balance, AI requests, consent status, and the CrispDemo catalogue of video styles, devices, and motion presets. A catalogue search sends your search text

6.4 Desktop Permissions

Our application may request the following desktop OS permissions:

• Screen Recording: Required when you record your screen in CrispDemo
• Microphone: Required only if you turn on the microphone for a screen recording
• Network Access: Required for the requests described in this section
• File System Access: Required to read the recordings and screenshots you select and to store project data

You can manage these permissions through your system settings. Denying permissions may limit functionality.

6.5 Data Deletion on Uninstall

When you uninstall the CrispDemo application:

• Application preferences and cache data may be removed
• Your project folders, and the recordings and screenshots you added, remain where they are and are not deleted by uninstalling CrispDemo
• Data stored on our servers (account information) will remain until you delete your account
• To delete your account and server-stored data, use Settings > Account > Delete account in the CrispDemo app, or contact us at legal [at] crispdemo.com

7. Information Sharing and Disclosure

We share your information with third parties only in the limited circumstances described below. We do not sell your personal information.

7.1 AI Services

• Google: Receives the narration text, music brief, and finished video described in Section 6.2, through our server or directly from your computer when you use your own Gemini API key
• Your coding agent's provider: The coding agent you choose in the Studio chat (Claude Code, Codex, or OpenCode) sends your chat, the project information it reads, and, with your source approval, frames from your recordings and your screenshots to its own model provider, under your account with that provider. CrispDemo is not a party to that exchange. See Section 8.3

Each provider processes requests under its current privacy documentation and applicable terms. We recommend reviewing:

• Google Privacy Policy: https://policies.google.com/privacy
• Gemini API Additional Terms: https://ai.google.dev/gemini-api/terms
• Anthropic (Claude Code): https://www.anthropic.com/legal/privacy
• OpenAI (Codex): https://openai.com/policies/
• OpenCode: https://opencode.ai

7.2 Service Providers

We engage third-party companies to perform services on our behalf, including:

• Cloud hosting: InterServer for our US server and Hetzner for our EU server, including their databases
• Cloudflare, for DNS, network proxying, and security
• Auth0, for sign-in
• Stripe, for payments
• Mailgun, for internal operational alerts, which can include an account ID

These service providers have access to your information only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.

7.3 Payment Processors

Credit purchases use Stripe Checkout. We give Stripe your name and email address to create your Stripe customer record. Stripe collects your payment details, billing address, and any tax ID, handles them under its own terms, and returns transaction status and billing references to us. Stripe sends your receipts.

7.4 Business Transfers

If helpful bits GmbH is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice in our Services of any change in ownership or use of your personal information.

7.5 Legal Requirements and Protection of Rights

We may disclose your information if required to do so by law or if we believe in good faith that such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service or other agreements
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of helpful bits GmbH, our users, or the public
• Investigate potential violations of our Terms or policies

7.6 Aggregated or De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you. This may include usage statistics, industry trends, or demographic information shared with partners, researchers, or the public.

7.7 With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

8. Google AI and Coding-Agent Processing

CrispDemo lets the coding agent you choose rebuild your app's screens and build your videos in the Studio chat, and uses Google's AI services for narration, music, and review. This section explains those data flows.

8.1 Data Sent to Google

When you create or change a video, CrispDemo sends Google only:

• Narration text, language, and voice, for Gemini text-to-speech
• A short music brief and target length, for Google Lyria
• Unless you turn it off, a reduced copy of the finished video with its sound, and the scene titles and narration text of its plan, so Gemini can review it. Parts of your recordings and screenshots can appear in the finished video

CrispDemo does not send your recordings, frames, or screenshots to Google. Your app's screens are rebuilt by the coding agent you choose (Section 8.3).

8.2 How Requests Reach Google

Through CrispDemo's server. When you are signed in and have not chosen your own key, requests go through our server in your region, and their cost is charged to your CrispDemo balance. The server keeps the narration text or music brief only until the request finishes. It keeps the generated narration or music audio for up to 7 days so the application can collect it after an interruption, and then removes it. It keeps a record of each request (IDs, device ID, stage, model, usage, cost, and status). A video sent for review is held in a temporary file while it is forwarded; a large video may be uploaded to Google's file storage for the request and is deleted from it afterwards.

With your own Gemini API key. You can instead add your own Gemini API key, with or without a CrispDemo account. The key is stored in your operating system's credential store, and requests go directly from your computer to Google. Google bills your key, and Google's terms for your Google account apply to that use. We do not receive the request content.

Provider-side processing and retention follow Google's current applicable terms and controls. We recommend reviewing Google's current privacy documentation for complete information about its data practices.

8.3 Coding Agents in the Studio Chat

The Studio chat runs a coding agent on your computer: Claude Code, Codex, or OpenCode. It is your own tool: you choose it and sign in to it, and it runs under your own account or provider settings with that agent's vendor. The vendor's terms govern what it does with your data. The agent rebuilds your app's screens and writes the story, script, and music brief. CrispDemo does not read, print, or store your agent sign-in credentials.

• The agent works through CrispDemo tools that run only on your computer. It can read the current project and your other CrispDemo projects, look up the CrispDemo catalogue, and, with your source approval, read frames from your recordings and your screenshots
• The agent sends what it reads, and your chat messages, to its model provider (for example Anthropic for Claude Code or OpenAI for Codex), under your agreement with that provider. CrispDemo does not transmit them
• OpenCode can use free models without an account. Some free models may use what you send them to improve the model. Connect your own provider in OpenCode to avoid this
• If you ask CrispDemo to install or sign in to an agent, it downloads the agent from its vendor and opens the vendor's own sign-in

8.4 Your Choices

• CrispDemo's tools give your coding agent no frames from your sources until you give source approval for that project
• You can turn off the video review with Gemini in Settings
• You can use your own Gemini API key instead of our server, and remove it at any time
• You choose which coding agent to use, and which account or provider it uses

9. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

9.1 Security Measures

• Encryption: Data transmitted between your computer and our servers is encrypted using industry-standard TLS/SSL protocols
• Secure Storage: Sign-in tokens and your Gemini API key are kept in your operating system's credential store. The sign-in refresh token held on our server is stored encrypted
• Access Controls: We implement strict access controls to limit who can access user data
• Authentication: Sign-in uses Auth0 with PKCE, and your sign-in is bound to the device ID of the application you signed in with
• Monitoring: We monitor our systems for suspicious activity and potential security incidents
• Regular Updates: We regularly update our security practices and software to address new threats

9.2 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. Notification will be provided via email to the address associated with your account and/or through a prominent notice in our Services.

9.3 Your Security Responsibilities

You are responsible for maintaining the security of your account credentials. We recommend:

• Using a strong, unique password for the account you sign in with (Google, GitHub, Microsoft, Apple, or OpenAI)
• Not sharing your account credentials with others
• Keeping your computer and OS software up to date
• Using device security features like login passwords and FileVault encryption
• Immediately notifying us if you suspect unauthorized access to your account

10. State-Specific Privacy Rights (United States)

Residents of certain U.S. states have specific privacy rights under state law. This section describes rights available to residents of California, Virginia, Colorado, Connecticut, and Nevada.

10.1 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know

You have the right to request disclosure of:

• Categories and specific pieces of personal information we have collected about you
• Categories of sources from which we collected your personal information
• Our business or commercial purposes for collecting or selling personal information
• Categories of third parties with whom we share personal information
• Specific pieces of personal information we have about you

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions under California law.

Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt-Out of Sale or Sharing

We do not sell your personal information as defined by California law. If our practices change, we will update this Privacy Policy and provide you with notice and an opportunity to opt out.

Right to Limit Use of Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than those permitted under CPRA without providing you the right to limit such use.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA rights. We will not:

• Deny you goods or services
• Charge different prices or rates, including through discounts or penalties
• Provide a different level or quality of goods or services
• Suggest you will receive different prices, rates, or quality of goods or services

Authorized Agent

You may designate an authorized agent to make requests on your behalf. We may require verification that you authorized the agent and verification of your identity.

California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information regarding disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

10.2 Virginia Privacy Rights (VCDPA)

If you are a Virginia resident, you have the right to:

• Confirm whether we are processing your personal data and access such data
• Correct inaccuracies in your personal data
• Delete personal data you provided to us
• Obtain a copy of your personal data in a portable format
• Opt out of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

10.3 Colorado Privacy Rights (CPA)

Colorado residents have similar rights as Virginia residents under the Colorado Privacy Act, including rights to access, correct, delete, and obtain a portable copy of personal data, as well as opt out of certain processing activities.

10.4 Connecticut Privacy Rights (CTDPA)

Connecticut residents have rights similar to Virginia and Colorado residents under the Connecticut Data Privacy Act, including rights to access, correct, delete, data portability, and opt-out rights.

10.5 Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of certain covered information we have collected about you to third parties. We do not currently sell your covered information as defined under Nevada law. If our practices change, we will update this Privacy Policy and provide Nevada residents with an opt-out opportunity.

10.6 Exercising State Privacy Rights

To exercise any of the rights described above, please contact us at legal [at] crispdemo.com with "State Privacy Rights Request" in the subject line. We will verify your identity before processing your request and respond within the timeframe required by applicable state law.

11. International Data Transfers

helpful bits GmbH is a German company, but our Services rely on infrastructure and service providers located in multiple countries, including the United States. Your information may be transferred to, stored in, and processed in countries other than your country of residence.

11.1 EU/EEA/UK Users

If you are located in the European Union, European Economic Area, or United Kingdom, your personal data may be transferred to and processed in the United States and other countries that may not provide the same level of data protection as your home country.

We implement appropriate safeguards for international data transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Ensuring service providers comply with GDPR requirements
• Implementing technical and organizational measures to protect data
• Conducting data protection impact assessments where required

11.2 Legal Basis for Processing (GDPR)

For users in the EU/EEA/UK, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to provide Services under our Terms of Service
• Legitimate Interests: Processing for fraud prevention, security, service improvement, and business operations
• Legal Obligations: Processing to comply with applicable laws and regulations
• Consent: Processing based on your explicit consent (which you may withdraw at any time)

11.3 GDPR Rights

If you are subject to the General Data Protection Regulation (GDPR), you have additional rights:

• Right of access to your personal data
• Right to rectification of inaccurate personal data
• Right to erasure ("right to be forgotten") in certain circumstances
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent (where processing is based on consent)
• Right to lodge a complaint with a supervisory authority

12. Children's Privacy

Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 18. If you are under 18, do not use our Services or provide any information to us.

If we learn that we have collected personal information from a child under 18 without verification of parental consent, we will delete that information as quickly as possible. If you believe we might have information from or about a child under 18, please contact us immediately at legal [at] crispdemo.com.

12.1 COPPA Compliance

Our Services comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect, use, or disclose personal information from children under 13. Our Terms of Service require users to be at least 18 years old.

13. Data Retention

We retain your personal information for as long as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce our agreements.

13.1 Retention Periods

• Account Information (email, name, Auth0 user ID): Until you delete your account; deleted immediately when you do
• User Content: Server-held content under our control is retained as needed to provide Services and handled in response to a valid deletion request, subject to applicable exceptions. Local project data remains on your device until you remove it
• Project Data: Recordings, frames, rebuilt screens, audio, and exported videos stay in your project folders until you delete them. Provider-side handling of data sent to Google follows Google's current terms, and handling by your coding agent's provider follows your agreement with that provider
• AI Requests Through Our Server: The narration text or music brief is removed when the request finishes, and a video sent for review once it has been forwarded. Generated audio is removed after 7 days. Request content and results are deleted immediately when you delete your account
• Usage Statistics and AI Request Records: The record of each request (IDs, device ID, stage, model, usage, cost, and status) and usage records are kept for 12 months, or until you delete your account, whichever is sooner
• Billing Records (payments, balance changes, billing audit log): 10 years, as required by German commercial and tax law (HGB §257, AO §147). After account deletion they are linked only to a random account ID, not to your name or email
• Consent Records (which terms and privacy version you accepted, when, IP address and browser/app details): While your account exists and 3 years after deletion, as proof of consent
• Server Logs: 90 days, for security and troubleshooting
• Communications: Customer support communications retained for reasonable period to provide ongoing support

13.2 Deletion Requests

You can delete your account in the CrispDemo app under Settings > Account > Delete account. Deletion takes effect immediately. Signing in again later creates a new, empty account.

When you delete your account, we keep the Stripe customer ID and billing records described above for the legal retention period. Stripe keeps your payment and invoice records under its own obligations. Your CrispDemo sign-in is provided by Auth0; deleting your CrispDemo account removes your Auth0 user ID from our systems, but does not delete your Auth0 login.

The US and EU servers each keep their own accounts. Deleting your account in the app removes only the account on the server the app uses. If you also created an account on the other server, contact us at legal [at] crispdemo.com and we'll delete it.

You may also request deletion of personal data held by us by contacting us at legal [at] crispdemo.com. We respond within the timeframe required by applicable law, subject to the exceptions below. Deleting your account does not remove project data stored on your device or data handled by a provider under its applicable terms.

• Retention is required by law
• Data is needed to complete a transaction, provide a requested service, or fulfill our Terms
• Retention is necessary to detect security incidents or protect against illegal activity
• Data is needed to exercise or defend legal claims

14. How to Exercise Your Privacy Rights

14.1 Submitting Requests

To exercise your privacy rights, including rights to access, correct, delete, or port your data, please contact us at:

14.2 Verification Process

To protect your privacy and security, we will verify your identity before processing requests to access, correct, or delete your personal information. We may request:

• Email address associated with your account
• Account username or user ID
• Verification that you have access to the email address on file
• Additional information to verify your identity for sensitive requests

14.3 Response Timing

We will respond to your request within the timeframe required by applicable law:

• California (CCPA/CPRA): 45 days, with possible 45-day extension
• Virginia, Colorado, Connecticut: 45 days, with possible 45-day extension
• GDPR (EU/EEA/UK): 30 days, with possible 60-day extension for complex requests

14.4 Account Settings

The CrispDemo application lets you control the following. To access, correct, or delete account data held on our servers, contact us as described in Section 14.1.

• Source approval for each project's recordings and screenshots
• Whether finished videos are reviewed with Gemini
• Adding or removing your own Gemini API key
• Which coding agent the Studio chat uses
• The recordings and screenshots attached to a project, and the project files on your computer
• Signing out

14.5 Appeal Process

If we deny your privacy rights request, you have the right to appeal our decision. To appeal, respond to our denial email with "Appeal" in the subject line and explain why you believe our denial was incorrect. We will respond to appeals within the timeframe required by applicable law.

15. Do Not Sell or Share My Personal Information

We do not sell or share your personal information as defined by California and other state privacy laws.

We do not:

• Sell your personal information to third parties for monetary consideration
• Share your personal information with third parties for cross-context behavioral advertising
• Use your personal information for targeted advertising based on your activity across different services

We share project data with Google solely to narrate, score, and review the videos you request, which does not constitute "selling" or "sharing" under applicable privacy laws. We also share data with service providers who perform services on our behalf, subject to contractual restrictions on their use of your information.

If our practices change in the future, we will update this Privacy Policy and provide required notice and opt-out mechanisms before implementing any sale or sharing of personal information.

16. Cookies and Tracking Technologies

16.1 What We Use

Our website code does not set cookies for analytics or advertising. It stores your theme preference in your browser's local storage. Our network provider may set cookies needed for security. The CrispDemo desktop application does not use web cookies; it keeps sign-in tokens in your operating system's credential store and other data in local files.

16.2 Types of Technologies

• Essential Cookies: Necessary for security and basic functionality
• Session Tokens: Keep you signed in to the desktop application
• Local Storage: Store preferences and data locally on your device

16.3 Third-Party Analytics

We do not currently use third-party analytics services on our website or in the desktop application. If we add them, we will update this Privacy Policy. We use analytics for service improvement, not for behavioral advertising.

16.4 Your Choices

Most web browsers allow you to control cookies through settings. However, disabling cookies may limit your ability to use certain features of our website. Desktop application data can be controlled through the application settings and your system preferences.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post the revised Privacy Policy on our website and in our desktop application
• For material changes, provide notice via email to the address associated with your account
• For material changes affecting your rights, may display a prominent notice in our Services

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after changes to this Privacy Policy constitutes your acceptance of the revised policy.

If we make material changes that retroactively expand our rights to use personal information we previously collected about you, we will obtain your consent before implementing such changes.

18. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us:

18.1 Response Timing

We strive to respond to all privacy inquiries within a reasonable timeframe, typically within 5-10 business days for general inquiries and within timeframes required by law for privacy rights requests.

18.2 Supervisory Authority (EU/EEA/UK Users)

If you are located in the European Union, European Economic Area, or United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law.

18.3 California Consumer Rights Requests

California residents may also contact us via email at legal [at] crispdemo.com to exercise CCPA/CPRA rights. We do not discriminate against California residents who exercise their privacy rights.

19. Additional Provisions

19.1 Third-Party Links

Our Services may contain links to third-party websites, applications, or services not operated by us. This Privacy Policy does not apply to third-party services. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies.

19.2 AI-Generated Content

Rebuilt screens, scripts, narration, music, reviews, and videos are generated with AI models and may contain mistakes. They can also repeat personal or confidential information that appears in your recordings, screenshots, or instructions. Review a video before you publish it. Coding agents you run in the Studio chat are governed by their providers' terms.

19.3 California Privacy Rights Notice

Under California Civil Code Section 1798.83, California residents are entitled to request information regarding disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

19.4 Data Protection Officer

For questions specifically related to GDPR compliance or EU/EEA data protection, you may contact our data protection team at legal [at] crispdemo.com with "GDPR Inquiry" in the subject line.

19.5 Accessibility

If you have difficulty accessing this Privacy Policy or need it in an alternative format, please contact us at legal [at] crispdemo.com.