Privacy Policy

1. Responsibility & Commitment

CropCode strictly adheres to data minimization principles under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), ensuring that only the essential technical and accounting information is processed to deliver the service.

2. Account, Billing & Usage Data

We store only your authentication email, technical installation identifier, and processing quota ledger. All billing transactions, subscriptions, and tax processing are handled entirely by Lemon Squeezy acting as Merchant of Record (MoR) under PCI-DSS Level 1 compliance.

3. Ephemeral In-Memory Vision Processing & Artificial Intelligence

Screen crops selected by the user are processed strictly ephemerally in transient RAM memory solely for the duration of the inference request to extract structured semantic JSON. Images are destroyed immediately afterwards; CropCode never persists image files to storage, never logs visual content, and never uses user crops to train public or proprietary machine learning models.

4. Infrastructure Providers & Subprocessors

The platform relies on enterprise cloud infrastructure and high-availability external services:

• Edge computing & hosting: Cloudflare.
• Payment processing & tax compliance: Lemon Squeezy.
• Vision model inference: OpenRouter and foundational multimodal API providers (such as Google AI / Gemini), whose commercial terms stipulate ephemeral request processing with zero persistent retention of visual payloads and no usage of API data for model retraining.

5. Notice to California Residents (CCPA / CPRA)

CropCode does not sell, rent, lease, or share personal data of any user with third-party brokers or advertisers in exchange for financial compensation or commercial gain.

6. Local Browser Storage

Chrome local storage (chrome.storage) is strictly utilized to retain the active user session token, UI preferences, and local quota balance directly on the user's device.

7. User Data Rights & Contact

Users maintain full control over their data and may exercise their rights to access, rectify, or request complete erasure of their account and ledger records at any time by contacting our support team at: hisperides.dev@gmail.com.

8. Official Language

This Privacy Policy is officially published in English for international commercial compliance. In case of discrepancies with any automated browser translation, this canonical version shall prevail.