CrazyToad is local-first. The desktop app has no product-usage analytics: we do not measure which features you use or collect your code, prompts, files, or agent-session contents as telemetry. The account, subscription, entitlement, update, diagnostic, and support services process the limited data described below.
What we collect
- Launch waitlist: if you ask to be notified, we store your email address so we can send one launch email. You can request removal any time by emailing support.
- Trial and purchase: Stripe, through Stripe Managed Payments and acting as merchant of record, processes your email, payment method, billing country, tax, trial, invoice, refund, dispute, and subscription events. CrazyToad receives identifiers and status metadata needed to provide access. We never receive or store your full card number.
- Account and entitlement: we process your verified email, authentication sessions, subscription state, paid-through date, plan, device handles and labels, entitlement refresh results, application version, and security-update eligibility. One individual subscription supports two active Windows devices.
- Commerce and reliability: we record trial activation, conversion, cancellation reason when supplied, entitlement-refresh success or failure, webhook processing health, and security-relevant authorization failures. We do not attach code, prompts, project names, or feature-usage history to these events.
- Support: when you raise a ticket, we process its text, attachments, replies, status, investigation evidence, and diagnostics you explicitly choose to upload. CrazyToad or configured AI providers may process this material to investigate and answer the request. Do not submit secrets or unrelated personal data.
- Optional diagnostics: a report is sent only after you preview and approve it. Reports may contain app logs, version, operating-system details, error context, and files you deliberately attach. Raw diagnostic reports are deleted after 30 days unless law or an active security investigation requires longer retention.
What we do not collect
- No advertising tracking or sale of personal information.
- No automatic collection of source code, prompts, files, or agent-session contents.
- No full payment-card storage by CrazyToad.
Processors we use
- Stripe Managed Payments as merchant of record for checkout, payment, tax, subscription management, fraud, and disputes.
- Resend for transactional email.
- Cloudflare for the website, account, entitlement, support, security, and signed-download control plane.
- Your configured AI providers when you choose to use them in the product or submit a support request that requires AI-assisted investigation.
Retention and rights
We keep waitlist emails until the launch notice or deletion request; raw opt-in diagnostics for 30 days; authentication and device records while needed for account security; and commerce, tax, refund, dispute, consent, and support records for the period needed to provide the service, prevent abuse, and meet legal or accounting obligations. You may request access, correction, export, or deletion, subject to records we must retain by law.
Contact
Privacy questions: support@crazytoad.dev. Security reports: security@crazytoad.dev. Do not include exploit code, credentials, or customer data in an initial report.