Privacy Policy

Information you provide

CruxApex uses account and workspace details you provide, such as your email address, name, phone number, workspace information, task instructions and uploaded files, to provide the features you use. Task activity, approval decisions and results can be recorded in audit records so you can review what happened.

Include only information you are authorized to share. Do not include passwords, verification codes or payment card details in task messages or privacy requests.

Google sign-in

When you choose Continue with Google, Google provides an account identifier and basic profile information, including your email address, name and profile image when available. CruxApex uses this information to create or recognize your account, sign you in and identify your account. Supabase processes authentication for CruxApex.

The Google sign-in permissions are limited to your basic identity, email address and profile (openid, userinfo.email and userinfo.profile). This sign-in does not grant access to Gmail, Google Calendar, Google Drive or other Google content. A separately offered Google connection requires its own authorization. Google does not share your Google Account password with CruxApex.

How Google shares sign-in information · Google Privacy Policy

Browser storage and sessions

CruxApex uses browser storage to keep your authenticated session available between page loads. The authentication client can refresh the session so you do not need to sign in on every visit. Signing out ends that browser session; clearing browser storage can also require you to sign in again. This storage supports sign-in and is separate from the information saved in your account.

Services that process information

Google and Supabase process information for Google sign-in. Website hosting and the services used for features such as AI tasks, phone communications, payments and external connections process information relevant to those functions when you use them. For example, a task sent to an AI service includes the instructions and context needed for that task.

Processing depends on the features and services used by your workspace. Contact us if you need details about providers or processing locations for a particular feature before sharing information. Websites and services you visit separately have their own privacy notices.

Supabase Privacy Policy

Keeping and protecting information

Account, workspace, task and audit records support operating the service, maintaining access, reviewing work and investigating problems. Data does not automatically disappear when you stop using CruxApex, remove a Google connection or request account closure. A deletion request is reviewed separately, including which records are involved and any continuing service, security or legal need to retain them. Contact us for the status and scope of your request.

Sign-in uses HTTPS connections and authenticated sessions. The application checks account and workspace access before serving protected information. These controls do not eliminate every security risk. Contact us if you believe your account or information has been accessed improperly.

Your controls

You can review your profile settings and phone consent in the workspace. Account → Profile → Privacy & data offers an export of available audit records, currently up to 250 entries. This download is not a complete account archive and does not include every file or record.

The account-closure flow deactivates login, starts an audit export and records a deletion request for operator review. It does not immediately erase customer data. Save anything you need before requesting closure because you may lose account access when the service accepts the request.

To stop using Google sign-in, open your Google Account’s linked apps page, select the CruxApex connection, open its sign-in details and choose Stop using Sign in with Google. Google may display the authentication domain as the connection name. Removing the Google link does not delete information already held by CruxApex. Also sign out of CruxApex if you want to end the current browser session.

Manage your Google Account’s linked apps · Google’s instructions for removing a sign-in link

Privacy requests and questions

Email orchestrator1@cruxapex.com to request access to, correction of or deletion of information, or to ask about this notice. Include the email address associated with your account and enough detail to identify your request. We may need to verify your identity before changing or disclosing account information. Do not send passwords or verification codes.

Requests are reviewed in light of the information involved and applicable requirements. An audit export, account closure and completed deletion are different outcomes; contact us if you need information beyond the available audit download or confirmation that a deletion request has been completed.

Contact us about privacy

Updates to this notice

We update this page when the notice changes and show the latest revision date above. Contact us if you have questions about a change.