1. Scope and controller
This Privacy Policy applies to CrunchSave’s website, account area and AI-assisted property-media service. CrunchSave is operated by Enes Özdemir, who is the controller of personal information collected through the service. Privacy requests may be sent to enes.crunchsave@gmail.com.
2. Information we collect
Depending on how you use CrunchSave, we collect:
- Identity information: name and email address provided through email/password or Google sign-in.
- Brand and contact information: agent or studio name, logo, brand color, phone number and contact email.
- Property and project information: project title, property address, price, bedroom and bathroom counts, area, room labels, format, music choice and overlay preferences.
- User Content: room photographs, logos, prompts, optional edited images, generated video segments, final videos and associated filenames.
- Subscription information: plan, trial and subscription status, customer and subscription identifiers, renewal dates and billing-portal URL received from Lemon Squeezy. We do not receive or store full payment-card details.
- Operational information: credit balances and ledger entries, project status, generation request identifiers, timestamps, retry counts, error messages, webhook events and limited usage-event metadata.
- Request and security information: hosting, authentication and security providers may process IP address, browser, device and request-log information needed to deliver and protect the service.
3. How we use information
We use information to:
- authenticate users and maintain user-owned accounts;
- store, edit and transform property images and generate requested videos;
- add selected listing, agent, logo and contact details to branded outputs;
- manage trials, credits, subscriptions and billing status;
- show project progress and deliver completed media;
- respond to support, cancellation and privacy requests;
- prevent abuse, investigate failures, secure the service and comply with law; and
- improve reliability using limited operational events and de-identified or aggregated observations.
4. Legal bases
Where data-protection law requires a legal basis, we process information as necessary to perform our contract with you, for our legitimate interests in operating and securing CrunchSave, to comply with legal obligations, and with consent where consent is required. You may withdraw consent for future processing when consent is the basis, without affecting earlier lawful processing.
5. Where information is processed
We disclose information only as needed to operate the service:
- OpenAI Sites: website hosting and application runtime infrastructure.
- Supabase: account authentication, email verification, password recovery and the PostgreSQL database that stores account, subscription, credit and project records.
- Cloudflare infrastructure: private object storage and delivery of uploaded and generated media.
- fal.ai and its model providers: uploaded photographs, editing instructions and generation inputs needed to create image edits and video segments.
- Inngest and Railway: durable background-job coordination and FFmpeg media assembly, including listing and contact details used to create the requested branded outro.
- Resend: transactional email such as production completion and operational failure notices.
- Upstash: short-lived request counters used to enforce abuse-prevention rate limits.
- Lemon Squeezy: merchant-of-record checkout, payment, tax, invoice, subscription, refund and chargeback administration.
- Professional and legal recipients: advisers, authorities or counterparties when reasonably necessary to comply with law, protect rights or complete a legitimate business transaction.
These providers may process information in the United States, Türkiye and other countries where they or their subprocessors operate. Where required, we rely on contractual safeguards or other lawful transfer mechanisms.
6. AI processing
Property images and related instructions are sent to fal.ai to run image-editing and image-to-video tasks. Video segments and the listing details selected for the outro are sent to our Railway assembly worker. Generated files and provider URLs may remain with the provider under its retention and security practices. Do not upload unnecessary personal information, people, private documents or sensitive content. CrunchSave does not use User Content to build its own AI model.
7. Storage and security
Account and project records are kept in the application database. Original uploads, brand logos and completed videos are stored in private object storage and served through user-authorized routes. Service credentials remain server-side, billing webhooks are signature checked and project reads and writes are filtered by user identity.
We use reasonable technical and organizational measures, but no online system is completely secure. Keep independent copies of important source and output files.
8. Retention and deletion
Account, brand, project and media data is retained while the account remains active so the project library and completed outputs remain available. Operational and security records are retained for as long as reasonably necessary to provide, protect and troubleshoot the service.
To delete an account or specific project data, email enes.crunchsave@gmail.com from the account email with the subject “Privacy deletion request.” We will verify the request and aim to delete the requested personal information and media from active CrunchSave systems within 30 days.
We may retain limited billing, transaction, fraud-prevention, security or legal records for longer where required or permitted by law. Data may also remain temporarily in protected backups or in a provider’s systems under that provider’s retention schedule. Deletion does not remove copies that you or another person exported or published outside CrunchSave.
9. Your choices and rights
Depending on where you live, you may have rights to access, correct, obtain a copy of, delete, restrict or object to processing of your personal information, and to appeal a denied request. You may update current brand and contact defaults in Settings. For any other request, email enes.crunchsave@gmail.com from the account address. We may request information needed to verify identity and authority.
CrunchSave does not sell personal information and does not use it for cross-context behavioral advertising. We will not discriminate against you for exercising an applicable privacy right.
10. Cookies and analytics
CrunchSave does not use advertising trackers or sell data for behavioral advertising. We may use privacy-limited product analytics to understand feature reliability without recording uploaded media or editing prompts. Authentication, hosting and checkout providers may use cookies or similar technologies on their own domains or as needed for sign-in, security, session continuity and payment. Their processing is governed by their own notices where they act independently.
11. Children
CrunchSave is a professional property-media service for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. Contact us if you believe a minor has provided information.
12. Changes and contact
We may update this policy as the service or law changes. The revised date will appear at the top, and material changes may receive additional notice where appropriate.
Questions, complaints and privacy requests may be sent to enes.crunchsave@gmail.com. If a concern is not resolved, you may also have the right to contact the privacy or data-protection authority where you live.