Privacy policy

What we process

When you sign in, WorkOS processes your name and email address, and Crossroads keeps your WorkOS user identifier. For each API key we keep its name, its display prefix and a hash, never the key itself.

When you request early access, Crossroads keeps your email address, with the analytics identifiers of your visit and the link or ad that brought you, until you sign up, and gives them to WorkOS for the waitlist.

The context and question instructions you send go to the model to compute the answers and are not stored. For each request we keep its idempotency key, a hash of its input, its outcome, the answers under your question names and the token counts, so that a retry returns the saved response and usage can be billed. We also keep monthly totals of requests and tokens.

When you add a payment method, Stripe collects it with your billing email. Crossroads keeps your Stripe and Metronome customer identifiers and your billing status.

Our providers

We use WorkOS for sign-in, Convex to store accounts, keys and requests in the United States, Modal to run the model, Vercel to host the website and console and to route API requests, and Cloudflare to store error reports. Stripe holds payment methods and collects invoices. Metronome receives your billing email or user identifier, your Stripe customer identifier, and each successful request’s identifier, time, model and token counts, to calculate those invoices.

These providers may process information outside Quebec and Canada, where privacy rules may differ.

Logs and cookies

Our servers and hosting providers log request metadata such as IP address, time, request identifier and errors, which can name an invalid question, but not the context or instructions you send. The console uses a cookie to keep you signed in.

The website and console keep a diagnostic log in your browser. When a critical error occurs, they send us the error, your browser and operating system, your user identifier if you signed in to the console, and the records just before it; these never include your context, questions, answers or keys. We keep these reports for at most 90 days. The rest of the log leaves your browser only if you export it and send it yourself.

Retention and your rights

We keep account, key and request records while your account is open, and billing records as long as the law requires.

Our privacy officer is responsible for these practices. To access, correct or delete your information, ask a question or make a complaint, email [email protected]. We may need to verify your identity first.