Privacy Policy

Last updated: April 2026 · Chisty Digital Forge, New South Wales, Australia

1. Who We Are

CleanCrumbs is operated by Chisty Digital Forge (ABN 25 864 140 160), based in New South Wales, Australia. For privacy enquiries, contact us at support@cleancrumbs.cloud.

2. What Data We Collect

File data (lead lists):

• Processed entirely in your browser using a Web Worker.
• Never transmitted to any server — not even ours.
• Protected by our Content Security Policy, which restricts connections to an explicit allowlist used for authentication, support, aggregate usage enforcement, and optional consented conversion measurement. File contents are never included in those requests.
• Cleared from memory when you close the tab.

Account data (via Clerk):

• Email address.
• Name (optional, if provided).
• Google profile information (if you choose Google OAuth sign-in).
• Stored and managed by Clerk (see below). Retained while your account exists.

Usage metadata (signed-in users only):

• An aggregate count of rows processed and a timestamp are sent to our server to enforce the monthly free-tier quota.
• No file content, headers, cell values, or PII from your rows is ever transmitted — only the integer count.
• Anonymous (non-signed-in) users do not trigger this call.

Payment data (via Stripe):

• Card details and billing address are handled entirely by Stripe.
• We receive only a transaction confirmation and your Stripe customer ID.
• Never stored on our infrastructure.

Technical data:

• No analytics or tracking pixels by default. Google Ads conversion measurement is available only after explicit consent and only for completed sign-ups.
• The consent choice is stored locally in your browser and can be changed from the app footer. Disabling it prevents future conversion events.
• Vercel (our hosting provider) collects standard server access logs (IP address, user agent, request path). Retained per Vercel's policy.
• Clerk sets a strictly necessary session cookie for authentication.

3. Third-Party Processors

4. Cookies

Clerk sets a session cookie required for authentication. This is a "strictly necessary" cookie and does not require a consent banner under the ePrivacy Directive or the Australian Privacy Act. No advertising or tracking cookies are used unless you explicitly allow optional conversion measurement.

5. Your Rights

Under GDPR and the Australian Privacy Act (APP), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Export your data (via Clerk's account portal).

To exercise these rights, email support@cleancrumbs.cloud or delete your account directly via the CleanCrumbs app's account settings. File data is never held by us — there is nothing to request regarding file content.

6. Data Retention

• Account data is retained while your account exists. Deleting your Clerk account removes all associated data.
• Payment records are retained by Stripe per their policy and applicable tax/legal requirements.
• Server access logs are retained per Vercel's standard policy.

7. Children

CleanCrumbs is not intended for users under 16 years of age. We do not knowingly collect data from children.

8. Changes to This Policy

We will update the "Last updated" date when this policy changes. For material changes, we will provide notice via the app. Continued use after changes constitutes acceptance.

9. Contact

For privacy enquiries: support@cleancrumbs.cloud
Chisty Digital Forge (ABN 25 864 140 160), New South Wales, Australia