You
ControllerYou are the controller of the personal data you collect through your website — for example, names and email addresses submitted through your site's contact forms.
Crusty Pixel · Legal
Data Processing
Effective date:
This page explains how Crusty Pixel processes personal data on behalf of its customers. Read it together with our Privacy Policy and our Data & Security page.
Who does what
Roles
Your visitors' data is yours to direct. We keep it running.
Crusty Pixel
ProcessorCrusty Pixel is the processor of that data: we store and display it only as needed to operate your website, and only on your instructions.
Your own account
For your own account information (your name, email, and billing details), Crusty Pixel is the controller. How we handle that data is described in our Privacy Policy.
What we process
On your behalf, we process:
- Content Website content you create or upload (text, images, pages).
- Form submissions Information submitted by your site's visitors through forms (such as names, email addresses, and messages).
- Technical data Technical data needed to operate and secure the service (such as server logs).
Subprocessors
We use a small number of trusted service providers (“subprocessors”) to run Crusty Pixel. Each one only receives the data it needs to do its job, and each is bound by confidentiality and data protection terms.
- PaymentsStripe, Inc. processes subscription payments. We never see or store your full card number.
- Hosting and network securityProviders that store and serve your website and protect it from attacks.
- Email deliveryA provider that sends account and service emails, such as your setup link.
- AIAI model providers that process the text you give the AI builder in order to generate your website’s content. If you use your own AI key, your requests go directly to your AI provider under its terms.
A current list of our subprocessors is available on request. Email support and we’ll send it to you. If we add or replace a subprocessor, we’ll update this page.
Where data is processed
Data is hosted in the United States. Where data is transferred outside your country, we rely on the safeguards provided by our service providers, including standard contractual clauses where applicable.
Security
We protect processed data with the measures described on our Data & Security page, including HTTPS encryption, access controls, and regular backups.
Retention and deletion
- While your account is active We keep processed data for as long as your account is active.
- End of your paid period The 30 days count from here, not from the day you cancel.
- Within 30 days When you cancel, we delete your website content and visitor data within 30 days of the end of your paid period.
If you ask us to delete specific data sooner, contact us and we will do so unless we are required to keep it by law.
Breach notification
If we discover a personal data breach affecting data we process for you, we will notify you without undue delay and provide the information needed for you to meet your own notification obligations.
Your instructions
We process data only on your instructions and as described in these pages and our Terms of Use. If you need data returned or deleted, or have questions about processing, contact us at [email protected].
Email support