Privacy Policy

Craze Technologies, Inc. Last updated: October 1, 2026

This Privacy Policy explains how Craze Technologies, Inc. ("Craze", "we", "our", or "us") collects, uses, shares, and protects personal information. It applies to our website at craze.ai, the Craze video studio, shared video pages, the Craze MCP server that lets other AI apps work with your projects, and any other service that links to this policy (together, the "Service").

Craze is based in the United States. Information is processed in the United States and other countries where we and our providers operate.

This policy does not cover third-party services you choose to use with Craze, such as an AI assistant you connect to your account or a site where you publish your videos. Their own privacy policies apply.

The short version

• We collect your account details, the content you upload and create, and information about how you use the Service.
• To make your videos, we send your prompts and media to the AI model providers that run the models you use.
• Content submitted for AI generation may be used to develop and train Craze models, subject to applicable law, required consent, and separate agreements. Files merely stored in a project are excluded. See section 2.
• We do not sell personal information for money. Some advertising cookies and pixels can count as "selling" or "sharing" under state privacy laws. You can opt out of them.
• You can ask to access, correct, or delete your personal information by emailing team@crazehq.com.

1. Information we collect

Information you give us

• Account information. Your name, email address, and password. If you sign in with Google, we receive your name, email address, and profile photo from Google. Our authentication provider stores your password. We do not.
• Workspace information. Your workspace name, its members, their roles, and invitations.
• Onboarding answers. When you sign up, we may ask about your role, what you make, how often you create, and how you use AI. Answering is optional.
• Billing information. Your plan, purchases, credit balance, auto-reload settings, and billing history. Our payment processor, Stripe, collects your payment card details. We receive the card brand and last four digits, not the full card number.
• Communications. Messages you send us through support chat or email, and any feedback you give.

Your content

"Content" means what you put into the Service and what the Service makes for you. This includes:

• prompts and chat messages you send to the Craze agent
• files you upload, such as images, video, audio, voice samples, and documents
• websites and links you ask the agent to look at
• generated images, video, music, sound effects, voices, captions, transcripts, edits, and exported videos
• voice messages you record with the microphone button in chat

Your Content may include personal information about you or other people, such as their faces, voices, or names.

Information we collect automatically

• Device and log information. IP address, browser and operating system, device type, pages viewed, referring site, dates and times of visits, errors, and performance data.
• Approximate location. We derive your country and region from your IP address. We use it to determine whether the Free plan is available to you, to apply the right privacy settings, and for security. We do not collect precise location.
• Product usage. The features you use, buttons you click, projects you create, generations and exports you run, credits you spend, and records of how the Craze agent handled your requests.
• Campaign information. The ad, campaign, or link that brought you to Craze, including campaign tags, ad identifiers, the page you landed on, and the site that referred you.
• Email engagement. Whether you opened our emails and which links you clicked.
• Cookies and similar technologies. See section 4.

Information from other sources

• Google and our authentication provider, when you sign in.
• Our payment processors, which tell us whether a payment succeeded and the status of your subscription.
• AI apps you connect. When you connect an AI assistant such as ChatGPT or Claude to Craze, we receive the requests it makes on your behalf and information about the connection.
• IP lookup services, which tell us the approximate location of an IP address.

2. How we use information

We use personal information to:

• Provide the Service. Run the Craze agent, generate media, render and deliver exports, store your projects, host share links you create, and send notifications you turn on.
• Handle billing. Charge for plans and credits, measure usage, apply credits, run auto-reload if you enable it, and keep financial records.
• Communicate with you. Answer support requests, send account and service messages, and send product tips by email. You can unsubscribe from product tips at any time.
• Understand and improve the Service. Analyze how people use Craze, fix bugs, and improve the agent's quality. This includes reviewing records of agent interactions to find out why a request failed.
• Market Craze. Measure our ad campaigns and show ads for Craze on other sites and apps, subject to your choices in section 4.
• Keep the Service safe. Check that sign-ins come from real people, prevent fraud and abuse, limit excessive use, and enforce our Terms of Service.
• Comply with the law. Meet legal obligations, respond to lawful requests, and protect our rights and the rights of others.

We may also use information for other purposes we describe to you when we collect it, or with your consent. We may create aggregated or de-identified data that cannot reasonably identify you. We will not try to re-identify it.

How AI processes your Content

• AI providers do the generating. When you ask Craze for something, we send the Content needed for that request to the providers that run the models involved. For example, a prompt and a reference photo go to the provider running the image model you choose. Your chat with the agent goes to the provider running the agent's language model.
• The agent can use the web. If the agent searches the web or reads a page for you, it sends the search query or link to our web search provider, or fetches the page directly.
• Craze model development. We may use prompts, reference media, and other content you submit for AI generation to develop, train, fine-tune, and improve Craze's AI models. This applies to Free and paid accounts, but excludes files merely uploaded or stored in a project and not submitted for AI generation. Any such use is subject to applicable law, required consent, and any separate agreement we have with you.
• Provider processing. Third-party AI providers process submissions under their applicable terms and policies, which may permit use for model training. Provider practices and available controls vary; we do not guarantee that every provider excludes submissions from training.
• Public use of your Content. We will not publish your private uploads or prompts, or use your Content in marketing, showcases, testimonials, or public model demonstrations, without your permission. A public share link does not give us that permission.
• Analytics on agent interactions. Our product analytics provider receives records of how the agent handled each request. These records can include your prompts, the agent's responses, and the results of the tools it used. We use them to troubleshoot problems and improve the agent.
• People at Craze. Our staff may view your Content when you ask for help, to investigate a failure, abuse, or security issue, to enforce our Terms of Service, or when the law requires it. With access controls in place, authorized support staff may sign in to your account to resolve an issue you report.

Faces and voices

Some features work with people's faces and voices. These include lip sync, talking photos, avatars, motion transfer, voice design, voice cloning, dubbing, and voice changing.

These features process photos, videos, and voice recordings through our service providers to generate content you request. You must have the rights and permissions required for your use. Uploaded media and generated content are retained as described in section 6. Content submitted for AI generation may also be used as described above, subject to applicable law, required consent, and separate agreements.

3. How we share information

We share personal information with the following:

• Service providers. Companies that help us run the Service. They may process information to provide services to us. AI providers may also process submissions under their own terms as described in section 2. They include:
  • hosting, database, storage, and computing providers, such as Vercel, Convex, Amazon Web Services, Cloudflare, Trigger.dev, E2B, and Archil
  • our authentication provider, WorkOS
  • payment and billing providers, such as Stripe and Autumn
  • AI model and media providers, such as Anthropic, OpenAI, Microsoft Azure, OpenRouter, fal, Replicate, ElevenLabs, and Twelve Labs, and the developers of the models those providers host
  • web search and browsing providers, such as Exa
  • analytics providers, such as PostHog and Google Analytics
  • our customer support provider, Crisp, and our email provider, Resend
  • security, consent management, IP lookup, and internal communication tools
• Advertising partners. Meta, Google, LinkedIn, Reddit, X, and TikTok may collect information through cookies and pixels on our website. We also tell Meta about certain actions, such as signups and purchases, along with a hashed version of your email address and account identifier, so we can measure our ads. Hashing does not make this information anonymous. These partners may use this information under their own policies. See section 4 to opt out.
• AI apps you connect. If you connect an AI assistant to Craze, we share the project information it requests, within the permissions you grant.
• Your workspace. Other members of your workspace may see your name, email address, and role. Workspace admins manage billing for the workspace.
• People you share with. Content you choose to share may be accessible to others.
• Push notification services. If you turn on browser notifications, your browser maker's push service delivers them to you.
• Legal and safety. When we believe in good faith that the law requires it, or to protect the rights, property, or safety of Craze, our users, or others. We report apparent child sexual abuse material to the National Center for Missing and Exploited Children.
• Business transfers. As part of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets. The recipient will be bound by this policy or will notify you of any changes.
• With your consent or at your direction.

4. Cookies and tracking technologies

Cookies are small files stored in your browser. Pixels, local storage, and similar tools work in a similar way. We use them for these purposes:

• Necessary. Keeping you signed in, checking that you're a real person, remembering your privacy choices, and keeping your editor settings. The Service does not work without these.
• Product analytics. We use PostHog to understand how people use the Service. When you're signed in, this analytics data is linked to your account. Browser analytics run when you allow them or where your region's privacy settings allow them by default. We also collect backend operational records, such as generations, credit usage, and errors, to operate, secure, and improve the Service.
• Google Analytics. This runs only when you allow it or where your region's privacy settings allow it by default. We do not use session recordings or heatmaps.
• Advertising. Pixels from Meta, Google, LinkedIn, Reddit, X, and TikTok help us measure campaigns and show ads for Craze. These run only when you allow them or where your region's privacy settings allow them by default.
• Campaign attribution. We store information about the campaign or link that brought you to Craze and ads you clicked.

Your choices

• Manage preferences. Where the link appears, use "Manage preferences" in our website footer or account menu to turn browser analytics and advertising on or off.
• Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of advertising and browser analytics in that browser.
• Email us. You can also opt out of advertising by emailing team@crazehq.com.
• Browser settings. You can block or delete cookies in your browser. Blocking necessary cookies will stop parts of the Service from working.

Your browser analytics choice does not turn off backend operational records. We do not use those records for advertising. We do not respond to Do Not Track signals, but we do honor Global Privacy Control as described above.

5. Your choices and controls

• Projects and files. You can delete projects and files in the Service. Deletion is handled through the process described in section 6.
• Share links. You can revoke or replace a share link from your export history.
• Connected AI apps. You can disconnect an AI app at any time from your Connections settings.
• Emails. Use the unsubscribe link in any product email. We will still send you messages about your account, security, and billing.
• Notifications and microphone. You control these through your browser's permissions.
• Your account. To close your account and delete your personal information, email team@crazehq.com.

6. How long we keep information

We keep personal information for as long as your account is open and as long as we need it for the purposes in this policy. That includes keeping financial records, resolving disputes, preventing abuse, and meeting legal obligations. Retention depends on the type of information and why we need it.

When you delete a project, file, or account, we remove or de-identify its information from active systems through our deletion process, subject to applicable law. Backups and historical versions may remain until they are removed through normal retention cycles. We may retain conversation, usage, billing, security, and other records when needed for the purposes above. Deletion does not automatically undo prior lawful model training or remove its effects from an existing model, subject to applicable law and any separate agreement.

AI and other providers may retain submissions under their own terms and policies, including for abuse prevention or permitted model development.

7. Security

We protect information with technical and organizational safeguards. We encrypt data in transit, and we encrypt stored project media. Each project runs in its own isolated computing environment, using temporary credentials that can reach only that project's files. We limit staff access to people who need it.

No system is perfectly secure, and we cannot guarantee the security of your information. If a breach affects your personal information, we will notify you as the law requires.

8. Children

You must be 18 or older to use Craze. The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email team@crazehq.com and we will delete it.

9. U.S. state privacy rights

Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon, and other states may have rights over their personal information under applicable privacy laws. The rights available depend on where you live, whether the law applies, and any legal exceptions.

Your rights

• Access. Learn what personal information we have collected about you, where it came from, why we use it, and who we share it with, and get a copy in a portable format.
• Correction. Ask us to correct inaccurate personal information.
• Deletion. Ask us to delete personal information we collected from or about you.
• Opt out of sale, sharing, and targeted advertising. See section 4. You can also email us.
• Opt out of profiling. We do not use personal information to make automated decisions that produce legal or similarly significant effects.
• Non-discrimination. We will not treat you differently for using these rights.

How to make a request

Email team@crazehq.com with "Privacy request" in the subject line. To protect your account, we will verify your request by matching it to the email address on your account, and we may ask for more information. An authorized agent may make a request for you with your signed permission. We will ask you to confirm your identity with us directly.

We respond within the time required by applicable law and provide any required notice if an extension applies.

Appeals

If we decline your request, you can appeal by replying to our decision or emailing us with "Privacy appeal" in the subject line. We will respond within the time your state's law requires. If you disagree with our answer, you can contact your state attorney general.

Selling and sharing

We do not sell personal information for money. Our advertising partners' cookies and pixels, and the information we send Meta about signups and purchases, may count as a "sale" or "sharing" for targeted advertising under some state laws. In the past 12 months, we may have sold or shared these categories of personal information with advertising partners:

• identifiers, such as cookie IDs, device IDs, and hashed email addresses
• internet activity, such as pages you visited and actions you took on our website

We do not knowingly sell or share the personal information of anyone under 16.

Sensitive personal information

We collect account login credentials. Your Content may include other sensitive information, such as the faces and voices of people in your media. We process sensitive personal information for the purposes described in this policy only as permitted by applicable law, with consent where required. We do not use it to infer characteristics about you.

California notice at collection

In the past 12 months, we have collected the following categories of personal information, from the sources and for the purposes described in sections 1 and 2:

• Identifiers. Name, email address, IP address, account IDs, and cookie and device identifiers. Disclosed to service providers. Sold or shared with advertising partners as described above.
• Customer records and commercial information. Billing details, plans, purchases, and credit usage. Disclosed to service providers.
• Internet or other electronic network activity. Product usage, records of agent interactions, and browsing activity on our website. Disclosed to service providers. Sold or shared with advertising partners as described above.
• Approximate geolocation. Country and region derived from your IP address. Disclosed to service providers.
• Audio, visual, and similar information. Uploaded and generated images, video, audio, and voice messages. Disclosed to service providers, including AI model and media providers.
• Professional information. Your role, if you tell us during onboarding. Disclosed to service providers.
• Sensitive personal information. Account login credentials, and faces and voices in your Content. Disclosed to service providers.

We keep each category for the periods described in section 6.

California residents may also request information about disclosures of personal information to third parties for their own direct marketing, where applicable law provides that right.

10. Users outside the United States

Information may be processed in the United States and other countries where we and our providers operate, whose privacy laws may differ from yours. Applicable law may require safeguards for international transfers.

If EU or UK data protection law applies, Craze Technologies, Inc. is the controller of personal information we process for our own purposes. Where we process personal information on behalf of a business customer, that customer may control the processing and handle related requests. The conditional data-processing terms in section 23 of our Terms of Service apply where required by applicable law.

Where applicable, we rely on performance of a contract to provide the Service, legitimate interests in operating, supporting, and securing it, legal obligations, and consent where required. Depending on applicable law, you may request access, correction, deletion, portability, or restriction; object to processing; withdraw consent; and complain to your local data protection authority. Contact team@crazehq.com to exercise your rights or ask about international processing. We handle requests within the time required by applicable law.

11. Third-party services

The Service may link to or work with third-party services, such as AI apps you connect, embedded videos, and scheduling tools. We do not control them, and their own privacy policies apply.

12. Changes to this policy

We may update this Privacy Policy. When we do, we will change the date at the top. We will provide any notice or obtain any consent required by applicable law.

13. Contact us

Craze Technologies, Inc. team@crazehq.com