This policy describes what Cruxal collects, why, and who processes it on our behalf. Last updated 22 September 2026.
- What we collect: your name, email address and profile picture from Google when you sign in; the companies and industries you choose to follow; your email preferences; and, if you subscribe, your billing identifiers and any GSTIN you supply. We also record how the product is used — pages viewed, features opened and actions taken — so we can tell which parts of it work.
- Analytics: we use Google Analytics 4 across the site and PostHog (United States) for the signed-in application. Both record page views and product events. When you are signed in, these events are associated with your account identifier — an internal random string, never your email address.
- Session recording: PostHog records how pages of the signed-in application are used, so we can see where the product is confusing. All text you type is masked before the recording leaves your browser, and the API keys and account settings pages are excluded from recording entirely. We do not record anything on the public site.
- Processors we share data with: Google (sign-in and analytics), PostHog (product analytics and session recording, stored in the United States), Razorpay (payments), SendGrid (email delivery), and Google Cloud (hosting and database, in India). A notification containing your email address is sent to our own private Slack workspace when an account is created. We do not sell your data and we do not share it for advertising.
- Email: we send the alerts and digests you have opted into. Every one carries a one-click unsubscribe link that works without signing in, and unsubscribing from one stream does not silently end the others.
- Your choices: you can change or stop any email stream in your settings, and you can ask us to delete your account and everything attached to it. PostHog honours your browser's "Do Not Track" setting: turn it on and nothing is collected from your browser and no sessions are recorded. Four account events are recorded by our server rather than your browser — signing up, opening the app, following a company and starting a subscription — and those are kept whatever the setting. Google Analytics does not honour Do Not Track, but an ad blocker will stop it. An ad blocker will not stop PostHog, because we serve it from our own domain — Do Not Track is the setting that does. The product works normally either way.
- Security: API keys are stored only as hashes and cannot be recovered. Access to production data is restricted and our database is not reachable from the public internet.
- Contact: for any privacy question, or to request deletion, write to support@cruxal.in.
By using Cruxal, you agree to this Privacy Policy. We may update it from time to time; continued use of the platform constitutes acceptance of any changes.