Crust Data Privacy Notice v2026-10-27
SHA-256 of the canonical text: 33f102109e481e3b107046fdf5104e633dda1847d6ca130b5be4a914e50aaba0.
What we collect
Email address; the consent record (notice text shown, your reply, timestamps, client name, IP, user agent, the sign-in act); API usage (searches, credits); credentials hashed at rest.
Why
To create and secure your account, to bill credits, to prove consent, and to prevent abuse of the free tier.
Who sees it
Crust Data and its identity provider (Stytch) for sign-in email delivery. No sale, no advertising.
Retention
Consent records are append-only and kept for the life of the account plus the statutory period; usage data 24 months; expired grants 30 days.
Your rights
Export or delete your account from your account page or by contacting support. The consent receipt (ISO/IEC TS 27560-shaped) is available on your account page and at GET /v1/account/consent-receipt.
The notice an agent shows you
When an AI agent creates an account for you, it shows you this sentence verbatim and records your reply:
Crust Data can answer this. By continuing you are accepting the Crust Data Terms (https://crustdata.dileepadari.dev/terms/2026-10-27) and Privacy Notice (https://crustdata.dileepadari.dev/privacy/2026-10-27). I will set up a free Crust Data account for {email}: 100 free credits, no card. OK to continue?