Privacy Policy

Crestis operates an AI-powered website builder for local businesses at crestis.app. For privacy questions or requests, contact us at support@crestis.app.

We collect information you provide and data generated by your use of the Service:

• Account data — email address and, if you use Google sign-in, basic profile information from your Google account (such as name and email).
• Business data — business name, category, location, description, services, phone number, and contact email you enter to generate or edit a website.
• Generated content — AI drafts, previews, published sites, edits, and project metadata stored in your account.
• Early access / leads — email and optional business name when you request access or join a waitlist.
• Billing data — plan selection and payment-related records (for example crypto checkout order references). We do not store full payment card numbers on our servers.
• Usage and analytics — pages visited, device/browser type, approximate location derived from IP, referral source, and interactions with the Service (including optional Google Analytics and Meta Pixel, if enabled).
• Technical logs — IP address, timestamps, error logs, and security events needed to operate and protect the Service.

Crestis uses artificial intelligence to generate and improve website content, layouts, SEO text, and related assets. When you generate or improve a site, we send relevant business information you provide (such as business name, location, services, and description) to AI providers — currently OpenAI — to produce outputs.

Do not submit sensitive personal data you are not comfortable sharing with AI processors (for example health information, government IDs, or financial account numbers). You are responsible for ensuring you have the right to provide business information you enter.

We use collected information to:

• create, preview, edit, publish, and host websites you request;
• authenticate you and manage your account and projects;
• process subscriptions and billing;
• improve quality, reliability, and safety of AI outputs;
• provide support and respond to requests;
• send service-related messages (not marketing spam without consent);
• monitor usage, prevent abuse, and secure the platform;
• comply with legal obligations.

If you are in the European Economic Area or United Kingdom, we process personal data on these bases:

• Contract — to provide the Service you signed up for.
• Legitimate interests — to improve the Service, prevent fraud, and keep the platform secure (balanced against your rights).
• Consent — where required for optional analytics/marketing cookies or waitlist communications.
• Legal obligation — where law requires retention or disclosure.

We do not sell your personal information. We share data only with:

• Service providers who help us operate the platform, such as hosting (Vercel), database (Supabase), authentication (Google), email delivery, analytics, and AI inference (OpenAI).
• Published websites — contact details you choose to publish (phone, email, address) are visible to visitors of your live site.
• Legal and safety — when required by law or to protect rights, safety, and integrity of users and the Service.
• Business transfers — in connection with a merger, acquisition, or asset sale, with notice where required.

We and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

We keep account and project data while your account is active and for a reasonable period afterward so you can restore work or resolve billing issues. Logs and analytics may be kept for shorter operational periods. You may delete projects or request account deletion by contacting support@crestis.app. We may retain limited data where law or legitimate business needs require it (for example billing records).

We use administrative, technical, and organizational measures to protect your information (encryption in transit, access controls, and secure hosting). No method of transmission or storage is 100% secure; please use a strong, unique login method and protect your account credentials.

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based, and lodge a complaint with your local data protection authority.

To exercise these rights, email support@crestis.app. We may need to verify your identity before fulfilling a request.

We use essential cookies for authentication and session management. With your consent where required, we may use analytics tools (such as Google Analytics or Meta Pixel) to understand how the Service is used. You can control cookies through your browser settings and, where available, our cookie preferences.

The Service is intended for businesses and users aged 18 and older. We do not knowingly collect personal information from children under 16 (or the applicable age in your jurisdiction). Contact us if you believe a child has provided data and we will delete it.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated by email or in-product notice where appropriate.

Questions about this Policy or our data practices: support@crestis.app. Website: crestis.app.