Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect the following categories of information when you use the Crave platform:
- Account Information: Email address, username, date of birth, and hashed password when you register for an account.
- Identity Verification Data: Government-issued ID documents, selfie images, and extracted identity data submitted during age verification or creator verification processes.
- Billing Information: Payment method details, billing address, and transaction history. Payment card numbers are processed and stored by our PCI-compliant payment processors and are never stored on our servers.
- Usage Data: IP address, browser type, device information, pages visited, content viewed, and interaction timestamps.
- Communications: Messages sent through the platform, support tickets, and email correspondence with us.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Verify your identity and age to comply with applicable laws
- Process payments, subscriptions, and creator payouts
- Enforce our Terms of Service and Content Policy
- Detect and prevent fraud, abuse, and security threats
- Send you service-related notifications and updates
3. Sharing & Disclosure
Crave Digital Inc. does not sell your personal information to third parties. We may share information with trusted service providers who assist us in operating the platform, including payment processors, identity verification providers, cloud hosting providers, and analytics services. We may also disclose information when required by law, in response to valid legal process, or to protect the rights, safety, or property of Crave Digital Inc., our users, or the public. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. Data Retention
We retain your account information for as long as your account is active or as needed to provide you with the Service. Identity verification documents are retained for the duration required by 18 U.S.C. § 2257 record-keeping requirements and applicable regulations. Transaction records are retained for a minimum of seven years for tax and compliance purposes. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law. Anonymized and aggregated data may be retained indefinitely for analytics purposes.
5. Your Rights (CCPA / GDPR)
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Right to Portability: Receive your data in a structured, machine-readable format.
- Right to Opt Out: California residents may opt out of the sale of personal information (though we do not sell personal data).
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, please contact us at privacy@crave.app. We will respond to verified requests within 30 days.
6. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. Essential cookies are required for the Service to function and cannot be disabled. Analytics cookies help us understand how users interact with the platform so we can improve the experience. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect the functionality of the Service. We do not use cookies for targeted advertising. Third-party services integrated into the platform may set their own cookies subject to their own privacy policies.
7. Security
We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS 1.3), encryption at rest, and access controls. Identity verification documents are stored in encrypted, access-restricted storage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. We conduct regular security audits and vulnerability assessments. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.
8. Children's Privacy
The Service is strictly limited to individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. All users must pass age verification before accessing the platform. If we discover that we have inadvertently collected information from a minor, we will immediately delete that information and terminate the associated account. If you believe a minor has accessed the Service, please contact us immediately at privacy@crave.app.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting a prominent notice on the Service or by sending you an email. Your continued use of the Service after any changes constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically. The "Last updated" date at the top indicates when the policy was most recently revised.
10. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at privacy@crave.app or write to us at: Crave Digital Inc., 1209 Orange Street, Wilmington, DE 19801, United States.