Privacy Policy

Last updated: April 2, 2026 · Uspeh Labs, LLC · getcrazy.ai

1. Introduction

This Privacy Policy describes how Uspeh Labs, LLC ("Company," "we," "us," or "our"), operating getcrazy.ai ("Site"), collects, uses, stores, shares, and protects your personal information. This policy applies to all users of the Site and its services.

By accessing or using the Site, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, you must immediately stop using the Site.

Uspeh Labs, LLC is a Delaware limited liability company. For questions about this policy, contact us at support@gocrazyai.com.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password (hashed and salted — we never store plaintext passwords), display name, and profile preferences.
• Payment Information: Billing name and address. Full payment card details are collected and processed exclusively by our PCI-DSS Level 1 compliant payment processor. We never receive, transmit, or store your full credit card number, CVV, or card expiration date.
• Communication Data: Messages you send to our support team, complaint submissions, and feedback.
• User Content: Text prompts, chat messages, and preferences you provide while using our AI services.
• Age Verification Data: Confirmation that you are 18 years of age or older.

2.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Usage Data: Pages visited, features used, session duration, click patterns, referral URLs, and timestamps.
• Cookies & Similar Technologies: We use cookies, local storage, and similar technologies for authentication, preferences, analytics, and security. See Section 9 for details.
• Log Data: Server logs that record requests made to our servers, including IP addresses, request timestamps, and error information.

2.3 Information from Third Parties

• OAuth Providers: If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password. We use this data only to create and sign in to your account and to contact you about it. We do not sell Google user data, use it for advertising, or share it with third parties except our hosting and authentication providers. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in your Google Account settings or delete your account by contacting support@gocrazyai.com.
• Payment Processor: Our payment processor may share transaction status, subscription status, and billing-related information (but never full card details).

3. How We Use Your Information

We use your personal information for the following purposes:

4. AI Services & Data Processing

Our platform uses artificial intelligence to provide conversational and interactive experiences with virtual characters.

• Text prompts and chat messages are processed by AI models to generate responses. These inputs may be sent to third-party AI infrastructure providers for processing.
• Chat history is stored to provide conversation continuity and is associated with your account.
• Voice call audio is processed in real-time for speech-to-text and text-to-speech. We do not permanently store voice recordings.
• AI-generated outputs are probabilistic and may vary. We do not guarantee uniqueness or exclusivity of generated content.
• We do not use your personal conversations to train AI models without your explicit consent.

5. Information Sharing & Disclosure

We do not sell your personal data. We may share your information with:

• Payment Processors: To process subscriptions, credit purchases, and refunds. Our processor is PCI-DSS Level 1 compliant.
• AI Infrastructure Providers: To process AI requests. Data shared is limited to what is necessary for the service (prompts and responses). Providers are contractually prohibited from using your data for their own purposes.
• Hosting & Infrastructure Providers: For server hosting, database management, file storage, and content delivery.
• Analytics Providers: To understand usage patterns and improve our services. Analytics data is aggregated and does not identify individual users.
• Law Enforcement & Authorities: When required by valid legal process (subpoena, court order, warrant) or when we have a good-faith belief that disclosure is necessary to prevent imminent harm, protect our rights, or report suspected criminal activity (including CSAM — see our Safety & Compliance page).

All third-party service providers are required to process personal data securely and only for the purposes we specify. We maintain data processing agreements with all providers who handle personal data on our behalf.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. Where we transfer data internationally, we implement appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all third-party providers
• Encryption of data in transit and at rest

7. Data Security

We implement technical and organizational measures to protect your personal data:

• Encryption: All data transmitted between your browser and our servers is encrypted via TLS/HTTPS. Sensitive data at rest is encrypted.
• Authentication: Passwords are hashed using industry-standard algorithms. We support OAuth 2.0 for third-party authentication.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
• Payment Security: We are PCI-DSS compliant through our payment processor. We never store, process, or transmit full credit card numbers.
• Monitoring: We monitor our systems for security incidents and maintain incident response procedures.

Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Account data: Retained while your account is active. Upon account deletion, personal data is deleted or anonymized within 30 days, except where retention is required by law.
• Chat history: Retained while your account is active. You may delete your chat history at any time.
• Payment records: Retained for 7 years as required by tax and financial regulations.
• Server logs: Retained for up to 90 days for security and debugging purposes.
• Compliance records (2257, complaints): Retained for 7 years as required by law.

9. Cookies & Tracking Technologies

9.1 Cookies We Use

9.2 Local Storage

We use browser local storage for user preferences (e.g., age verification status, UI settings). This data remains on your device and is not transmitted to our servers.

9.3 Managing Cookies

You can control or delete cookies through your browser settings. Disabling essential cookies may prevent you from using the Site. Most browsers allow you to:

• View and delete existing cookies
• Block all or specific cookies
• Set preferences for specific websites

10. Your Rights

Depending on your location, you may have the following rights under applicable data protection laws (including GDPR, CCPA, and other regulations):

10.1 All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Data Portability: Request your data in a structured, commonly used, machine-readable format.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.
• Objection: Object to processing based on legitimate interests.

10.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: What personal information we collect, use, disclose, and sell.
• Right to Delete: Request deletion of personal information.
• Right to Opt-Out: We do not sell personal information. If this changes, we will provide an opt-out mechanism.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, contact us at support@gocrazyai.com. We will verify your identity and respond within the timeframes required by applicable law (generally 30 days for GDPR, 45 days for CCPA).

11. Children's Privacy

Our Site and services are restricted to adults aged 18 and older. We do not knowingly collect personal information from anyone under 18 years of age.

If we become aware that we have collected personal data from a person under 18, we will take immediate steps to delete that information and terminate the associated account. If you believe a minor has provided us with personal data, please contact us immediately at support@gocrazyai.com.

12. Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal. There is currently no industry standard for how websites should respond to DNT signals. We do not currently respond to DNT signals, but we do not engage in cross-site tracking of our users.

13. Third-Party Links

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Site at least 7 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Site after changes become effective constitutes acceptance of the updated policy.

15. Contact Information

For privacy inquiries, data requests, or complaints:

• Email: support@gocrazyai.com
• Company: Uspeh Labs, LLC · Delaware, USA
• Website: getcrazy.ai

If you are in the EU and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local Data Protection Authority (DPA).