Cruxy

Privacy Policy

Last updated October 16, 2026

1. Information We Collect

  • Account information: name, email address, password (stored encrypted), workspace name.
  • Google sign-in: if you choose to sign in with Google, we receive your name, email address and profile picture from your Google account. We do not receive your Google password, and we do not access your Google contacts, email, calendar, Drive files or any other Google data.
  • Billing information: for paid workspaces, your subscription is processed by Stripe; we do not store your card number — Stripe handles that directly.
  • Workspace data: time entries, clients, tasks, and related notes that you create.
  • Usage and device information: IP address, browser type, and basic interaction data needed to operate and secure the service.
  • Website contact form: if you write to us from cruxy.io, we receive your name, email address, company name and message by email. If you tick the box, we also add you to our marketing list. Either way, your name, email and company are saved to our email system (Klaviyo).
  • Marketing preferences: whether you opted in to product tips and updates when you signed up. Beyond the key milestones and alerts described under Klaviyo below, your workspace data is not sent to our marketing system.

2. How We Use Information

We use your information to operate the service — running the timer, generating reports, managing billing, authenticating your account, and providing customer support. If you sign in with Google, we use your Google name, email address and profile picture only to create your account, sign you in and show your name in the app. We do not sell your personal information, and we do not use it for third-party advertising.

3. How We Share Information

We don't sell your personal information. We share information only with service providers who help us run Cruxy, and only as needed to provide the service. These include providers of:

  • Payment processing (Stripe), for paid subscriptions
  • Database hosting, authentication and application hosting
  • Sign-in with Google, if you choose it. Google receives the fact that you signed in to Cruxy, under Google's own privacy policy
  • Bot and spam protection on sign-up
  • Email delivery, for account emails and for invoices and payment reminders you choose to send to your clients
  • Analytics (Google Analytics), which receives anonymous usage statistics such as pages visited, key steps completed (like signing up or starting an upgrade) and approximate location derived from your IP address. It does not receive your workspace data, such as client names, hours or amounts
  • Product email and usage insights, which receive your name, email, workspace name, plan, simple usage counts and key milestones (such as your first client, project or invoice). If you keep Overdue Invoice Alerts on (Settings), they also receive details of your past-due invoices so we can email you about them; you can turn these alerts off at any time. Promotional emails are sent only if you opted in, and you can unsubscribe at any time

4. Workspace Data

Time entries, clients, tasks and invoices you create belong to you. We don't sell them or use them for advertising, and we access them only to provide the service, to help you with a support request, or where the law requires it.

Cruxy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Retention

We retain your information as long as your account is active, or as needed to provide the service, comply with legal obligations, or resolve disputes. You can export or delete your workspace data at any time from account settings.

6. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information. To exercise these rights, contact us using the details below.

7. Security

We use industry-standard safeguards to protect your information, but no method of transmission or storage is 100% secure. We recommend using a strong, unique password for your account.

8. Children's Data

The service is not directed to children, and we do not knowingly collect personal information from children under 13 (or the age of majority in your jurisdiction).

9. Changes to This Policy

We may update this Privacy Policy from time to time. We’ll update the "Last updated" date above when we do.

10. Contact

Questions about this policy or your data? Contact us at support@cruxy.io.