Privacy Policy

1. Who we are, and what this policy covers

Cracked Robot, Inc. ("Cracked Robot", "we") is an AI product studio at 100 Grand Lane, Suite 315, Foster City, CA 94404, USA. This policy covers the personal information we collect through our websites, cracked.bot and openweave.dev: from visitors, from people who write or call us, and from people who hold an account.

Personal information that we process on behalf of a customer in delivering services is governed by that customer's Data Processing Addendum, not by this policy. For that data Cracked Robot acts as a service provider or processor.

The providers that process customer data for us are published in our Subprocessor List.

2. What we collect

Visitors. cracked.bot uses no advertising trackers and no analytics cookies. The public pages of openweave.dev use Google Analytics to count visits. Our hosting provider keeps standard server logs (IP address, browser user agent, request path) for security and operations, with time-limited retention.

Inquiries. When you write to us or call us, we keep what you tell us (your name, how to reach you, your message) so that we can answer.

Accounts. If you hold an account on our websites, we hold your name and email address, a phone number if one was given, and the record of your sign-ins. No account has a password: you sign in with a one-time code sent to your email, or with Google. Functional storage in your browser keeps you signed in, and nothing more. Where an account was given to you for work we do for a customer, the information in it is processed on that customer's behalf: the customer's agreement and Data Processing Addendum govern it (section 1), not this policy.

3. How we use it

• To run the websites, keep them secure, and find and fix faults.
• To answer you when you write or call.
• To sign you in and send you service email, such as a sign-in code.
• To meet our legal obligations.

We do not sell or share personal information (including as defined by the CCPA), and we do not use it for advertising.

4. Who we share it with

We use service providers to run the websites: a cloud host for the sites and their data, Google for sign-in with Google, for delivering our email and for the visit counts of openweave.dev. Each receives only what it needs to provide its service to us. We otherwise disclose personal information only where the law requires it.

5. Security

Personal information is encrypted in transit (TLS) and at rest, and access to it is limited to the people who need it to do their work.

6. How long we keep it, and deletion

We keep personal information only as long as needed for the purpose it was given. Email hello@cracked.bot and we will delete your personal information within 30 days, with written confirmation on request, unless the law requires us to keep it. Where the information is processed on behalf of a customer (section 1), we refer your request to that customer and act on its instructions.

7. Your rights

You may request access to, correction of, a copy of, or deletion of your personal information at any time via the contact below. We respond to all verified requests within 30 days, and we honor applicable rights under laws such as the CCPA/CPRA and GDPR. We do not discriminate against you for exercising them.

8. Where it is processed

We operate from the United States, and the personal information this policy covers is stored there.

9. Changes, and how to reach us

If we make material changes to this policy, we will post them at this address with a new effective date. Questions about this policy or about your personal information: hello@cracked.bot, or by post to Cracked Robot, Inc., 100 Grand Lane, Suite 315, Foster City, CA 94404, USA.