Last updated: March 2026
Crutan collects your Google account information (name, email, profile photo) when you sign in via Google OAuth. We store read-only access tokens to query your Google Analytics 4 and Google Search Console data on your behalf. We also store the business context you provide during onboarding, your delivery preferences, generated report content, and chat message history.
We use your data exclusively to provide the Crutan service — generating your daily and weekly analytics briefings, answering your chat questions, and delivering reports to the email or phone number you specify. We do not sell your data, share it with other users, or use it to train AI models.
Crutan requests read-only access to your Google Analytics 4 property and optionally your Google Search Console properties. We request the minimum scopes necessary (analytics.readonly). We never modify your data, create events, or change your Google Analytics configuration.
Your data is stored in a PostgreSQL database hosted by Supabase with row-level security — every database query is scoped to your user ID. Your data is never accessible to other Crutan users. Access tokens are stored encrypted.
Report generation and chat responses are powered by Claude (Anthropic). Your analytics data and business context are sent to Anthropic's API for processing. Anthropic's privacy policy governs how they handle API data. Your data is not used to train Anthropic's models.
If you opt in to email delivery, your reports are sent via Resend. If you opt in to SMS, they are sent via Twilio. Opt-in consent is recorded with a timestamp. You can disable delivery at any time from Settings.
You can disconnect your Google account, update your business context, and change delivery preferences at any time from the Settings page. You can request complete deletion of your account and all associated data by contacting us at privacy@crutan.com. Deletion is processed within 30 days.
Questions about this policy? Contact us at privacy@crutan.com.