Privacy policy
Last updated 4 November 2026
1. Who We Are
CRALIO LLC, a single-member limited liability company formed in the State of Wyoming, United States, under filing ID 2026-002065886, of 5830 E 2nd St, Ste 7000 #38271, Casper, WY 82609, United States, is the controller of the personal data described here. Write to info@cralio.app.
This policy covers our customers, people invited to a workspace, people a customer asks to review its work, anyone who joins our waiting list, and the people who appear in what customers upload. For your account, billing and job records we are the controller. For the people inside what you upload or write, and for your reviewers, you are the controller and we are your processor, under the data processing addendum. A question from someone about why their face is in your video is therefore yours to answer; we will help.
Most of what we hold comes from you. An invited person’s email address comes from the colleague who invited them; a reviewer gives us their own name; the people in a customer’s files reach us from that customer.
2. What We Collect, Why, and for How Long
| What | Why, and on what basis |
|---|---|
| Account: your name, email address and confirmation that you are 18 or older. With Google sign-in, your Google profile (name, email address, picture and account id), which our sign-in service keeps with your account | Running your account (contract); the age confirmation keeps the service to adults (legitimate interest) |
| Content: what you upload and what is made from it, including transcripts, subtitles, the wording read off a creative, tracks, covers, clips, stills and the images you attach | Running your jobs (contract) |
| What you write: prompts, style notes, lyrics, your glossary (including corrections you make to a creative’s wording), saved prompts, presets and client names | Running your jobs and keeping your settings (contract) |
| Approved wording you upload for Statics | Drawing that wording exactly (contract) |
| Typefaces you upload, and your confirmation that you may use them | Rendering your videos (contract); the confirmation is your consent |
| Job records: file name, length, languages, mode, cost, outcome | Running and showing your jobs (contract) |
| Credit ledger and subscription records with their Stripe ids, and the billing address and any VAT number you give at checkout, which Stripe keeps. We never see your card number | Charging you and explaining every charge (contract, and our legitimate interest); working out the tax on a sale (legal obligation) |
| People invited to a workspace: the email address a colleague gives us | Delivering the invitation (legitimate interest) |
| Reviewers: the name you type, your comments and decisions, and a keyed hash of your IP address | Collected for the customer who shared the link, as its processor |
| Waiting list: your email address (in lower case, and as you typed it if different), the page you came from, and the plan and credit amount you picked | Sending the one email it was left for (consent) |
| Acceptances: which documents you accepted and which consents you gave or withdrew, their version and a fingerprint of the words, when, the first three parts of your IP address and your browser’s identification string | Showing what was agreed (legitimate interest) |
| Before each purchase: whether you bought for a business or as a consumer, and a consumer’s request that we start at once, recorded like an acceptance, with what was being bought | The consumer law that asks for the request before we start (legal obligation), and showing what was agreed (legitimate interest) |
| Withdrawals and cancellations: the name and email address you give, the contract, what you sent and when, what it matched, the refund it was owed, what we did, and the first three parts of your IP address and your browser’s identification string | Answering them as consumer law requires, and showing that we did (legal obligation) |
| A copy of each email we send you | Running the account and knowing what was sent (contract) |
| Logs: the IP address, address requested and time of each request, and errors naming the account they belong to | Security and fixing faults (legitimate interest) |
| A record of each time a provider refused material from the account: when, which job and product, the model and the provider’s reason, never the material | Enforcing the acceptable use policy (legitimate interest) |
| The record of administrative actions | Accountability for what our staff do (legitimate interest) |
| A record of each file removed after a copyright notice: which job, the notice, when, and whether you were told; no file or its content | Handling copyright notices and repeat infringers (legitimate interest) |
| Material the law requires us to preserve after a report of child sexual abuse material, and the safety case behind it | Protecting children and meeting United States reporting law (legitimate interest) |
| Erasure records: a keyed fingerprint of the deleted account’s email address, the account’s ids, who erased it, any reason given, and the IP address and browser string of the request | Showing that the erasure happened and stopping the welcome credits being claimed twice (legitimate interest) |
| Database backups | Recovering from a failure (legitimate interest) |
How long each is kept is in the retention table.
Your email address, your files and the words of a job are needed to provide the service; without them we cannot open an account or run a job. A face or a voice in your files can be biometric data: the biometric notice covers it. Cralio has no models of its own and uses your content for nothing but your jobs, and never in marketing without asking you. We do not sell personal data or share it for advertising, and we make no automated decision about you that has a legal or similarly significant effect.
3. Email We Send You
| Cannot be turned off while the account exists | Account mail: a welcome when your account is created, an invitation to a workspace, a receipt, a failed payment, automatic top-up switching itself off, a notice if we remove a file after a copyright notice, an email at least 30 days before a plan price changes, a confirmation when you withdraw from or cancel a contract, and notice that one of these documents is changing. Our sign-in service also sends the emails that confirm your address and reset your password. |
| Carries an unsubscribe link for that kind only | Notices: a video finishing, a batch finishing, a job failing, credits running low or out, a retention window about to close, a reviewer’s rejections and comments on a campaign you shared for review, platform news, and the one message a waiting-list address was left for. These are on by default, and Settings has a switch for each. |
4. Who Receives It
The companies that do the work, host the service and send our mail are listed on the subprocessors page, with what each receives, where it is, whether it may train on it and how long it keeps it. Each job sends your material only to the providers for the mode you chose.
Our staff can see your account, jobs, errors, credit history and the addresses in your workspace through our administration screens, to answer questions and fix problems. Administrative actions, such as granting credits, retrying a job or changing a role, are recorded with who did it and when. We disclose data where the law requires it, including a report of child sexual abuse material to the authorities. Requests from police, courts or regulators go to info@cralio.app. If Cralio is sold or merged, your data moves with the business under this policy, and we will tell you.
5. Where It Is Kept, and Transfers
Cralio is a company in the United States, so if you are in the EEA or the UK your data is held by a company outside it from the moment you create an account. It is stored in Europe: files in Amazon’s Stockholm region, the database in Ireland, and the servers that run the site in Munich. Several of our subprocessors are outside the EEA; that page says where each one is.
What you upload reaches us under the European Commission’s Standard Contractual Clauses, Module Two, controller to processor, incorporated into our data processing addendum, with the UK’s International Data Transfer Addendum for the United Kingdom. For any other detail about transfers, write to info@cralio.app.
Banner sizes go to WaveSpeed only on your explicit consent, asked before your first banner-size order. There is no adequacy decision or Standard Contractual Clauses for that transfer, so your data may have less protection there. You can withdraw the consent in Settings; nothing new is then sent to WaveSpeed.
6. Your Rights
You can ask for a copy of your data, including in a form another service can read; ask us to correct it, delete it or restrict its use; object to processing we do on a legitimate interest; and withdraw a consent you gave, which stops that processing from then on. You can change your name in Settings, withdraw your consent to the banner-size transfer in Settings, delete any job from the dashboard, and erase your whole account in Settings by typing its address. Delete on a job removes what it produced immediately rather than at the end of the retention window. Everything else goes to info@cralio.app. We answer within one month, or within three for a complex request, and may ask you to confirm the account is yours. Someone you authorise can ask for you. If we refuse, we say why, and you can appeal by replying. Residents of California, Colorado, Connecticut, Virginia and other US states with similar laws have the same rights here.
What an erasure removes: your profile, email settings and the messages we sent you, your acceptances of these documents, your uploads, your workspace memberships, any waiting-list entry in your name, and your sign-in. In the workspaces you own it also deletes the jobs and their files, typefaces, glossary, subtitle styles, the prompts you saved in Generate, presets, approved wording, client names, invitations, and review links with what reviewers said. Work you did in a workspace somebody else owns stays theirs, with the files it was made from; your identifier is removed from it.
What it keeps: the credit ledger, without your name or file names; the workspace’s payment ids; keyed fingerprints of your email address and of the card that paid; which document versions you accepted; the withdrawals and cancellations you sent us, and our answers; our records of staff actions, safety cases and takedowns; a record of each provider refusal under a keyed fingerprint of the workspace; and a record that the erasure happened. If a step of an erasure fails, we finish it by hand.
If you think we have got something wrong, tell us. You can also complain to a data protection authority: in the EU, the one where you live or work; in the UK, the Information Commissioner’s Office.
7. Retention
How long we keep each thing is in the retention table. Work in a live review link is kept until the link ends, up to 30 days after delivery. To ask for a longer window for your workspace, up to 30 days, write to info@cralio.app. While a safety report about an account is investigated, its work is not deleted on schedule, for up to 30 days. Only material the law requires us to preserve is kept beyond that.
8. Security
Files are encrypted in transit and at rest and reached through links that expire. The security page describes the measures. If a breach affects your data we tell you without undue delay, and within 72 hours where the data processing addendum applies.
9. Cookies and Browser Storage
We set no cookies at all, and we run no advertising trackers, no cross-site pixels and no third-party analytics, so there is no consent banner. The app keeps only these in your browser’s own storage:
- the session that keeps you signed in, your initials drawn in your avatar, and whether your account is an admin one, until you sign out;
- your light-or-dark theme, which results you have already downloaded, whether the dashboard was last left grouped or flat, or as a gallery, and how large the gallery draws its tiles;
- language groups you saved in the language picker, and a counter that tells a second music take apart from the first;
- which tool each section of the generate workspace last opened on, what each generate tool was last set to, and your recent Generate orders, up to 48, with their prompts and pictures, so Reuse can put one back;
- which of your clients you last picked in the client switcher, as ids, for each account signed in on this browser;
- the documents you accepted on the sign-up form and the email address you typed, until the confirmation link records them;
- the name you type on a review page somebody shared with you, until the tab closes.
None of these is sent to us on its own. Clearing this site’s data forgets them all and signs you out.
10. Children
Cralio is for adults: signing up, joining a workspace and joining the waiting list all require confirming you are 18 or older. If you believe a child’s data has reached us, including in an uploaded video, tell us and we will delete it, unless the law requires us to preserve it for a report to the authorities.
11. Changes and Contact
Every change to this page moves the date at the top, and the version it replaces stays readable at its own link. We email every account when a change affects what we do with your data. For anything not covered here, write to info@cralio.app.