Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account data. Name, work email, company, and authentication details you provide when you create an account.
• Prospect data. Business-contact information (such as name, job title, employer, and business email) that you import, or that Crane sources and enriches on your behalf for B2B outreach.
• Usage data. Log data, device and browser information, and product-interaction events used to operate and improve the Service.
• Communications data. The content of sequences you create and the replies you receive through the Service.

2. How we use information

• To provide, maintain, and secure the Service.
• To find, verify, and enrich business-contact records you request.
• To send outreach on your behalf and route replies back to you.
• To detect abuse, enforce our Terms, and comply with legal obligations.
• To improve the Service, including model and product quality.

3. Legal bases

Where the GDPR or similar laws apply, we rely on legitimate interests (operating a B2B outreach tool and marketing to businesses), performance of a contract (providing the Service to you), consent (where required), and compliance with legal obligations. For prospect data you upload, you are responsible for having an appropriate legal basis to process and contact those individuals.

4. B2B outreach and CAN-SPAM

Crane is a business-to-business tool. Messages sent through the Service include a valid physical postal address and a clear, working unsubscribe mechanism, and we honor opt-out requests promptly, as required by the U.S. CAN-SPAM Act and comparable laws. Unsubscribed and bounced addresses are added to a suppression list so they are not contacted again. See our unsubscribe information page for details.

5. Sharing and disclosure

We do not sell personal data. We share information with service providers who process it on our behalf (for example, cloud hosting, email delivery, and data-enrichment vendors) under contractual confidentiality and security obligations, and with authorities when required by law. In a merger or acquisition, information may be transferred subject to this Policy.

6. Data retention

We retain account data for as long as your account is active and as needed to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account data at any time, subject to records we are required to keep (such as suppression lists).

7. Security

We use administrative, technical, and organizational safeguards — including encryption in transit, access controls, and tenant isolation — designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. Individuals whose business-contact data has been processed for outreach may opt out at any time using the unsubscribe link in any message.

9. International transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards, such as standard contractual clauses, for international transfers.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with an updated “Last updated” date.

11. Contact

Questions about this Policy or our data practices can be sent to privacy@crane.app.