Privacy Policy — The Crysler Group LLC

This Privacy Policy describes how The Crysler Group LLC ("we," "us," or "Company") collects, uses, and protects your information when you use our websites and services, including thecrysler.club and workbench.thecrysler.club (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Information You Provide

Category	Examples
Account information	Name, email address, authentication credentials (via Microsoft/Azure AD OAuth)
Tool inputs	Data you enter into calculators, simulators, diagnostic conversations, and analysis tools (e.g., work center names, financial figures, problem descriptions)
Voice input	Audio recordings submitted via hold-to-speak features, which are transcribed using OpenAI Whisper and then discarded
Engagement data	Meeting notes, uploaded files, priorities, and activity logs created during consulting engagements (Client Tier only)
Payment information	Billing details processed by Stripe. We do not store credit card numbers on our servers.

Information Collected Automatically

Category	Examples
Usage data	Pages visited, tools used, feature interactions, timestamps
Device & browser data	Browser type, operating system, screen resolution, IP address
Analytics	Data collected via Google Analytics 4 and Google Tag Manager (GTM-PNT2TTL), including custom events for tool interactions; aggregate page analytics via Vercel Analytics
Session recordings	Interaction behavior (clicks, scrolling, navigation) recorded via Microsoft Clarity, with content masking applied so text you type is not captured in recordings

2. How We Use Your Information

We use the information we collect to:

Provide the Service — process your inputs through our tools, generate analyses and reports, save your simulations and initiatives
Manage your account — authenticate your identity, manage subscription status, maintain your saved data
Facilitate consulting engagements — share relevant engagement data between you and your assigned consultant within the platform
Process payments — manage Pro Plan billing through Stripe
Improve the Service — understand usage patterns, diagnose technical issues, and enhance tool functionality
Communicate with you — send service-related notifications, respond to inquiries, and provide support

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy practices:

Service	Purpose	Data Shared
Supabase	Database, authentication, file storage	Account data, tool inputs, engagement data
Microsoft / Azure AD	Authentication (OAuth sign-in)	Email address, name
Stripe	Payment processing	Billing and payment information
Anthropic (Claude)	AI-powered analysis, diagnostic conversations, question generation	Tool inputs and prompts sent for processing
OpenAI (Whisper)	Voice-to-text transcription	Audio recordings (processed and not retained by us)
Google Analytics / GTM	Usage analytics	Anonymized usage and device data
Microsoft Clarity	Session recordings and heatmaps to understand how the Service is used	Interaction behavior (clicks, scrolls, navigation) and device data; typed content is masked and not captured
Vercel Analytics	Aggregate, cookieless page analytics	Anonymized page views and device data
Vector	Visitor identification — helps us understand which companies visit our sites	IP address, device and browser data
Embedded forms (thecrysler.club)	Newsletter signup and contact forms on thecrysler.club, served by our CRM platform	Information you choose to submit (name, email, message)
Google Fonts (thecrysler.club)	Font delivery on thecrysler.club	IP address (sent automatically when pages load)

We do not run paid advertising or share your data with advertising networks. Your data is never sold to third parties.

AI Data Use: We do not use your data to train AI models. Inputs sent to Anthropic and OpenAI are processed according to their respective API data policies, which generally do not use API inputs for model training.

4. Data Storage & Security

Your data is stored in Supabase-hosted infrastructure in the United States. We implement industry-standard security measures including:

Row-level security (RLS) policies ensuring users can only access their own data
Encrypted connections (HTTPS/TLS) for all data in transit
Authentication via OAuth (no passwords stored by us)
Restricted API keys with scoped permissions
Private storage buckets for engagement files

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Client Engagement Data

If you are a Client Tier user participating in a consulting engagement, please be aware that:

Engagement data (meeting notes, priorities, files, activity logs, and analyses) is accessible to both you and your assigned consultant (Dave Crysler / The Crysler Group LLC).
Engagement files are stored in a private storage bucket accessible only to authorized parties.
Engagement data is scoped to your specific engagement and is not shared with other clients.
Upon completion of an engagement, your data is retained unless you request deletion.

6. Cookies, Analytics & Session Recording

We use cookies and similar technologies on the Service. Here is the complete inventory:

Technology	Type	Purpose
Supabase session (browser localStorage)	Essential	Keeps you signed in. Required for the Service to function.
Interface preferences (e.g., `sidebar:state` cookie)	Essential	Remembers interface settings such as sidebar position. Expires after 7 days.
Google Analytics 4 (`_ga`, `_ga_*` cookies, via Google Tag Manager)	Analytics	Helps us understand which pages and tools are used, so we can improve the Service.
Microsoft Clarity (`_clck`, `_clsk` cookies)	Analytics	Records anonymized session interactions (clicks, scrolling, navigation) and generates heatmaps. Content masking is applied so the text you type into tools, forms, and chat is not captured in recordings.
Vercel Analytics	Analytics	Aggregate page-view analytics. Sets no cookies.
Vector	Visitor identification	Helps us understand which companies visit our sites. May set cookies and collects IP address and device signals.
Embedded form cookies (thecrysler.club)	Functional	Newsletter and contact forms embedded on thecrysler.club are served by our CRM platform and may set their own functional cookies.

We do not use advertising cookies or advertising pixels, and we do not sell or share your data with advertising networks.

You can control or delete cookies through your browser settings, opt out of Google Analytics with the Google Analytics opt-out browser add-on, and learn more in Google's Privacy Policy and Microsoft's Privacy Statement. Disabling essential cookies or localStorage may prevent you from signing in or using certain features.

7. Your Rights

You have the right to:

Access your data — request a summary of the personal information we hold about you
Correct your data — request corrections to inaccurate information
Delete your data — request deletion of your account and associated data
Export your data — request a copy of your data in a portable format
Cancel your subscription — at any time through the customer portal

To exercise any of these rights, contact us at dave@thecryslergroup.com. We will respond within 30 days.

8. Data Retention

We retain your data as follows:

Account data: Retained as long as your account is active, plus 90 days after deletion request
Tool outputs & saved analyses: Retained as long as your account is active
Engagement data: Retained until you request deletion, even after an engagement concludes
Voice recordings: Processed for transcription and not retained
Payment records: Retained as required by law and Stripe's policies
Analytics data: Subject to Google Analytics' retention settings

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we learn that we have collected data from someone under 18, we will delete it promptly.

10. International Users

The Service is operated from and data is stored in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.

12. Contact

For questions or requests related to this Privacy Policy, contact us at:

The Crysler Group LLC
Email: dave@thecryslergroup.com
Website: workbench.thecrysler.club