Privacy Policy

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Company (referred to as either "the Company", "We", "Us" or "Our") refers to CRAMMIT.
• Cookies are small files placed on Your Device by a website, containing details of Your browsing history among their many uses.
• Country refers to: Georgia, United States.
• Device means any device that can access the Service such as a computer, a cell phone, or a digital tablet.
• Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. We use these terms interchangeably unless a law uses a specific term.
• Service refers to the Website.
• Service Provider means any natural or legal person who processes data on behalf of the Company to facilitate or provide the Service.
• Usage Data refers to data collected automatically, generated by the use of the Service or from the Service infrastructure itself.
• Website refers to CRAMMIT, accessible from https://www.crammit.app/.
• You means the individual accessing or using the Service, or the legal entity on behalf of which such individual is accessing or using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. This may include, but is not limited to:

• Email address
• First name and last name
• Usage Data

Usage Data

Usage Data is collected automatically when using the Service. It may include information such as Your Device's IP address, browser type and version, the pages You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. When accessing via mobile device, We may also collect mobile-specific data such as device type, unique mobile device ID, mobile operating system, and mobile browser type.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies including beacons, tags, and scripts to track activity on Our Service and store certain information. These may include:

• Cookies or Browser Cookies. A small file placed on Your Device. You can instruct Your browser to refuse all Cookies or indicate when a Cookie is being sent. However, refusing Cookies may limit some parts of the Service.
• Web Beacons. Small electronic files embedded in pages or emails (also known as clear gifs, pixel tags, or single-pixel gifs) that allow the Company to count users who have visited pages, opened emails, and gather related statistics.

Where required by law, We use non-essential cookies (such as analytics and remarketing cookies) only with Your consent. You can withdraw or change Your consent at any time through Your browser or device settings.

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), to help us understand how users interact with our Service. Google Analytics collects information such as how often users visit the Website, what pages they visit, and what other sites they used prior to arriving at the Website.

Google Analytics uses first-party cookies to track user interactions. The data collected is transmitted to and stored on Google's servers in the United States. Google may use this data to evaluate your use of the Service, compile reports on website activity, and provide other services relating to website activity and internet usage.

We have enabled IP anonymization so that your IP address is truncated by Google within EU/EEA Member States before being transmitted to Google's servers.

You may opt out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on
• Adjusting your browser's cookie settings to refuse analytics cookies
• Using your browser or device's "Do Not Track" signal (note: this is not universally honored)

For more information on how Google uses data collected via our Service, please review Google's Privacy Policy at https://policies.google.com/privacy.

Stripe Payments

We use Stripe, a third-party payment processing service provided by Stripe, Inc. ("Stripe"), to process payments for token purchases and subscription plans on the Service.

When You make a purchase, You will be directed to Stripe's payment interface. Stripe collects and processes Your payment information, including credit or debit card numbers, billing address, and other financial information necessary to complete the transaction. We do not store, have access to, or process Your full payment card details. All payment data is handled directly by Stripe in accordance with PCI-DSS standards.

Stripe may collect additional data related to fraud prevention, transaction verification, and compliance purposes, including device fingerprinting, IP address, and usage patterns.

The information We receive from Stripe includes:

• Transaction ID and confirmation status
• Last 4 digits of the card used (for display purposes only)
• Billing country and postal code
• Subscription plan details and renewal dates

This information is used solely to manage Your account, fulfill Your purchases, process refunds, and comply with financial and legal obligations.

Stripe's use of Your personal information is governed by Stripe's Privacy Policy, available at https://stripe.com/privacy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor usage of our Service.
• To manage Your Account and give You access to the functionalities available to registered users.
• For the performance of a contract, including the purchase contract for tokens, subscriptions, or any other service You have purchased through the Service.
• To contact You by email or other forms of electronic communication regarding updates, service-related communications, or security updates.
• To provide You with news and special offers about goods or services similar to those You have already purchased, unless You have opted out.
• To manage Your requests to Us, including customer support inquiries.
• For business transfers, such as evaluating or conducting a merger, acquisition, or similar proceeding.
• For other purposes such as data analysis, identifying usage trends, evaluating the effectiveness of promotional campaigns, and improving our Service.

Sharing Your Personal Data

We may share Your Personal Data in the following situations:

• With Service Providers such as Google (analytics) and Stripe (payments) to monitor and analyze use of our Service and to process transactions.
• For business transfers in connection with a merger, sale, financing, or acquisition of all or a portion of Our business.
• With Affiliates, who will be required to honor this Privacy Policy.
• With business partners to offer You certain products, services, or promotions.
• With Your consent for any other disclosed purpose.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, and to comply with legal obligations, resolve disputes, and enforce policies.

When retention periods expire, We securely delete or anonymize Personal Data. Residual copies may remain in encrypted backups consistent with our backup retention schedule and are not restored except for security, disaster recovery, or legal compliance purposes.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in processing are located. This means information may be transferred to — and maintained on — computers located outside Your state, province, country, or governmental jurisdiction where data protection laws may differ. The Company will take all steps reasonably necessary to ensure Your data is treated securely and in accordance with this Privacy Policy. No transfer of Your Personal Data will take place to an organization or country unless adequate controls are in place.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data We have collected about You. You may update, amend, or delete Your information at any time by signing into Your Account and visiting the account settings section. You may also contact Us to request access to, correct, or delete any Personal Data You have provided to Us.

Please note that We may need to retain certain information when We have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.

Children's Privacy

Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 16 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. We will also let You know via email and/or a prominent notice on Our Service prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us by visiting this page on our website: https://www.crammit.app/contact