CRAVE MEDIA PRIVACY POLICY

Last Updated: November 20, 2025

Welcome to our Privacy Policy
Your privacy is critically important to us.

Crave Media is located at:

Crave Media
Phone: 8019174935
Website: https://www.cravemedia.io/

INTRODUCTION

It is Crave Media's policy to respect your privacy regarding any information we may collect while operating our website and conversion widget platform. This Privacy Policy applies to https://www.cravemedia.io/ and all related services, including our conversion widgets (sidebar widget, smart button widget, and after-hours widget) and client dashboard (hereinafter, "us", "we", "our services", or "the platform").

We respect your privacy and are committed to protecting personally identifiable information you may provide us through our website, dashboard, and widgets. We have adopted this privacy policy ("Privacy Policy") to explain what information may be collected through our services, how we use this information, and under what circumstances we may disclose the information to third parties.

This Privacy Policy applies to:

• Visitors to our marketing website (https://www.cravemedia.io/)
• Users who create accounts on our client dashboard
• End-users who interact with conversion widgets installed on our clients' websites

This Privacy Policy, together with the Terms and Conditions posted on our website, set forth the general rules and policies governing your use of our services. Depending on your activities when using our services, you may be required to agree to additional terms and conditions.

================================================================================

SECTION 1: INFORMATION WE COLLECT

1.1 WEBSITE VISITORS

Like most website operators, Crave Media collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as:

• Browser type and version
• Language preference
• Referring site
• Date and time of each visitor request
• Operating system
• Device type (desktop, mobile, tablet)

Our purpose in collecting non-personally identifying information is to better understand how visitors use our website and services. From time to time, we may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of our services.

We also collect potentially personally-identifying information like Internet Protocol (IP) addresses for logged-in users. We only disclose IP addresses under the same circumstances that we use and disclose personally-identifying information as described below.

1.2 CLIENT DASHBOARD USERS

When you create an account on our client dashboard, we collect:

Account Information:

• Business name
• Contact name
• Email address
• Phone number
• Password (encrypted)
• Business website domain
• Booking URL or scheduling link

Widget Configuration Data:

• Brand colors and customization preferences
• Custom headlines and messaging
• Widget display settings and schedules
• Business hours and timezone
• Enabled widget selections

Subscription Information:

• Subscription plan (Starter, Professional, Premium)
• Payment information (processed securely by Stripe - we do not store full credit card details)
• Billing history
• Trial status and expiration dates

Analytics and Usage Data:

• Widget performance metrics (impressions, conversions)
• Dashboard activity logs
• Feature usage patterns
• A/B testing results

1.3 CONVERSION WIDGETS (INSTALLED ON CLIENT WEBSITES)

Our conversion widgets (sidebar widget, smart button widget, and after-hours widget) collect limited, non-personally-identifying information from end-users who interact with them on our clients' websites:

Session Data (stored temporarily in browser):

• Current page URL
• Widget interaction timestamps
• A/B test variant assignments (which headline/button version was shown)
• Session-based preferences

Analytics Events (sent to our servers):

• Widget impressions (how many times widgets were displayed)
• Widget interactions (clicks, conversions, dismissals)
• Page URLs where widgets appeared
• Event timestamps
• Browser timezone (for after-hours widget functionality)
• Referring page information

Local Storage (stored in browser):

• Widget performance statistics (used for A/B test optimization)
• Session preferences (button text/color selections)
• Cached widget configurations (for faster loading)

Important Notes About Widget Data:

• We do NOT collect names, email addresses, or phone numbers through widgets
• We do NOT track users across different websites
• We do NOT use cookies for cross-site tracking
• Widget analytics are aggregated and used solely to optimize conversion performance
• End-users can clear widget data by clearing their browser's local storage

1.4 AI HEADLINE GENERATION

When clients use our AI-powered headline generation feature:

• We send page URLs and business context to Anthropic's Claude AI service
• We may temporarily fetch public page content to improve headline relevance
• Generated headlines are stored in our database for client use
• No personally identifying information is sent to AI services
• AI-generated content is subject to Anthropic's privacy policy

================================================================================

SECTION 2: HOW WE USE YOUR INFORMATION

2.1 TO PROVIDE AND IMPROVE OUR SERVICES

We use collected information to:

• Create and manage client accounts
• Deliver conversion widgets to client websites
• Process subscription payments and billing
• Send transactional emails (account verification, password resets, billing notifications)
• Provide customer support
• Analyze widget performance and optimize conversion rates
• Generate AI-powered headlines and recommendations
• Detect and prevent fraud or abuse
• Comply with legal obligations

2.2 TO COMMUNICATE WITH YOU

We may use your email address to send:

• Account verification emails
• Password reset instructions
• Billing and payment notifications
• Trial expiration reminders
• Service updates and feature announcements
• Responses to support inquiries

You can opt out of non-essential communications at any time by contacting us or using unsubscribe links in emails.

2.3 FOR ANALYTICS AND RESEARCH

We analyze aggregated, non-personally-identifying data to:

• Understand how our services are used
• Identify trends in widget performance
• Improve our platform features
• Optimize conversion strategies
• Create industry benchmarks and reports

================================================================================

SECTION 3: HOW WE SHARE YOUR INFORMATION

3.1 THIRD-PARTY SERVICE PROVIDERS

We work with trusted third-party service providers to operate our platform:

Supabase (Database & Authentication):

• Stores client account information, widget configurations, and analytics data
• Provides secure authentication services
• Subject to Supabase's privacy policy and security standards
• Data stored in secure, encrypted databases

Stripe (Payment Processing):

• Processes subscription payments and billing
• Stores payment method information securely
• We do not have access to full credit card numbers
• Subject to Stripe's PCI-DSS compliant security standards

Brevo (Transactional Emails):

• Sends account verification, password reset, and billing emails
• Processes email addresses for delivery purposes only
• Subject to Brevo's privacy policy

Vercel (API Hosting):

• Hosts our backend API and serverless functions
• Processes widget requests and analytics events
• Subject to Vercel's security and privacy standards

jsdelivr CDN (Widget Delivery):

• Delivers widget JavaScript files to client websites
• Caches widget code for fast global delivery
• Does not collect personally identifying information

Anthropic Claude AI (Headline Generation):

• Processes page URLs and business context for AI headline generation
• Used only when clients explicitly request headline generation
• No personally identifying information is sent
• Subject to Anthropic's privacy policy

3.2 CLIENT WEBSITES

When our conversion widgets are installed on client websites:

• Widget analytics data is shared with the client who owns the website
• Clients can view aggregated performance metrics in their dashboard
• Clients cannot access individual end-user identifying information through our platform
• End-users interacting with widgets on client websites are subject to that website's privacy policy

3.3 LEGAL REQUIREMENTS

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government requests
• Protection of our rights, property, or safety
• Protection of our users or the public

3.4 BUSINESS TRANSFERS

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website of any change in ownership or use of your personal information.

================================================================================

SECTION 4: DATA SECURITY

The security of your personal information is important to us. We implement industry-standard security measures to protect your data:

Technical Safeguards:

• Encrypted data transmission (HTTPS/SSL)
• Encrypted password storage (bcrypt hashing)
• Row-level security (RLS) policies on database tables
• JWT token-based authentication
• Secure API endpoints with rate limiting
• Regular security audits and vulnerability assessments

Access Controls:

• Role-based access control (clients can only access their own data)
• Multi-site isolation for Premium accounts
• Admin access restricted to authorized personnel
• Service keys protected and rotated regularly

However, please remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

If you have reason to believe that your account security has been compromised, please contact us immediately at the contact information provided below.

================================================================================

SECTION 5: DATA RETENTION

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

Account Information:

• Retained while your account is active
• Retained for 30 days after account deletion (for recovery purposes)
• Permanently deleted after 30-day grace period

Analytics Data:

• Widget performance data retained indefinitely for historical reporting
• Can be manually deleted by clients through dashboard controls
• Aggregated analytics may be retained for platform benchmarking

Billing Information:

• Payment history retained for 7 years (for tax and accounting purposes)
• Payment methods can be updated or removed at any time through Stripe portal

Backup Data:

• Automated backups retained for 30 days
• Backups permanently deleted after retention period

================================================================================

SECTION 6: YOUR RIGHTS AND CHOICES

6.1 ACCESS AND CONTROL

You have the right to:

• Access your personal information stored in our systems
• Update or correct inaccurate information through your dashboard
• Export your data (widget configurations, analytics, headlines)
• Delete your account and associated data
• Object to processing of your personal information
• Withdraw consent for data processing

6.2 WIDGET DATA MANAGEMENT

For end-users who interact with our widgets on client websites:

• Clear browser cookies and local storage to remove widget session data
• Use browser privacy/incognito mode to prevent local data storage
• Contact the website owner to request removal of widgets

6.3 MARKETING COMMUNICATIONS

You can opt out of marketing communications by:

• Clicking unsubscribe links in emails
• Updating preferences in your dashboard
• Contacting us directly

Note: You cannot opt out of transactional emails (account verification, billing notifications) as they are necessary for service delivery.

6.4 EXERCISING YOUR RIGHTS

To exercise any of these rights, please contact us using the information provided in the Contact section below. We will respond to your request within 30 days.

================================================================================

SECTION 7: COOKIES AND TRACKING TECHNOLOGIES

7.1 OUR USE OF COOKIES

Crave Media uses cookies and similar technologies to:

• Maintain your login session on the dashboard
• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Deliver personalized content and advertising

Types of Cookies We Use:

Essential Cookies (Required):

• Authentication cookies (keep you logged in)
• Security cookies (prevent fraud and abuse)
• Session management cookies

Analytics Cookies (Optional):

• Google Analytics (website traffic analysis)
• Usage pattern tracking
• Performance monitoring

Advertising Cookies (Optional):

• Google AdWords remarketing
• Facebook/Instagram advertising
• Interest-based advertising

7.2 CONVERSION WIDGET STORAGE

Our conversion widgets use browser storage technologies:

Session Storage (cleared when browser closes):

• Current widget state
• A/B test variant assignments
• Temporary session preferences

Local Storage (persists across sessions):

• Widget performance statistics
• Cached configurations
• Optimization data

These storage mechanisms:

• Do NOT contain personally identifying information
• Do NOT track users across websites
• Can be cleared through browser settings
• Are used solely for widget functionality and optimization

7.3 MANAGING COOKIES

You can control cookies through your browser settings:

• Block all cookies
• Delete existing cookies
• Set preferences for specific websites
• Use browser privacy/incognito mode

Note: Disabling cookies may limit functionality of our dashboard and widgets.

For more information about cookies and how to manage them, visit: http://www.allaboutcookies.org/

================================================================================

SECTION 8: THIRD-PARTY ADVERTISING

8.1 REMARKETING AND ADVERTISING

Crave Media uses remarketing services to advertise on third-party websites:

Google AdWords:

• Advertises to previous visitors on Google search and Display Network
• Uses cookies to track past visits
• Allows us to show relevant ads to users who haven't completed signup
• Subject to Google's privacy policy

Facebook/Instagram Advertising:

• Advertises to previous visitors on Facebook and Instagram
• Uses Facebook Pixel to track website visits
• Allows targeted advertising based on interests and behavior
• Subject to Facebook's privacy policy

8.2 OPT-OUT OPTIONS

You can opt out of interest-based advertising:

• Google Ad Settings: https://www.google.com/settings/ads
• Facebook Ad Preferences: https://www.facebook.com/ads/preferences
• Network Advertising Initiative: http://www.networkadvertising.org/choices/
• Digital Advertising Alliance: http://www.aboutads.info/choices/

8.3 THIRD-PARTY ADS ON OUR SITE

Ads appearing on our website may be delivered by advertising partners who may set cookies. These cookies allow ad servers to:

• Recognize your computer when showing ads
• Compile information about ad impressions
• Deliver targeted advertisements

This Privacy Policy covers our use of cookies but does not cover third-party advertiser cookies. We recommend reviewing the privacy policies of our advertising partners.

================================================================================

SECTION 9: CHILDREN'S PRIVACY

Our services are not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to remove such information from our systems.

================================================================================

SECTION 10: INTERNATIONAL DATA TRANSFERS

Your information may be transferred to, and maintained on, servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

Our service providers are located in:

• United States (Supabase, Stripe, Vercel, Brevo)
• Global CDN locations (jsdelivr)

By using our services, you consent to the transfer of your information to these locations. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

================================================================================

SECTION 11: CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have specific rights regarding your personal information:

Right to Know:

• What personal information we collect
• How we use that information
• Whether we sell or share that information

Right to Delete:

• Request deletion of your personal information
• Subject to certain legal exceptions

Right to Opt-Out:

• We do NOT sell personal information
• You can opt out of data sharing with third parties for marketing

Right to Non-Discrimination:

• We will not discriminate against you for exercising your rights

To exercise these rights, contact us using the information in the Contact section.

================================================================================

SECTION 12: EUROPEAN PRIVACY RIGHTS (GDPR)

If you are located in the European Economic Area (EEA), you have rights under GDPR:

Legal Basis for Processing:

• Consent: You provide consent when creating an account
• Contract: Processing necessary to provide our services
• Legitimate Interest: Improve services and prevent fraud

Your GDPR Rights:

• Right to access your personal data
• Right to rectification (correct inaccurate data)
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Data Protection Officer:
For GDPR-related inquiries, contact us at the email provided in the Contact section.

================================================================================

SECTION 13: AGGREGATED STATISTICS

Crave Media may collect and publish statistics about user behavior and widget performance:

Aggregated Data May Include:

• Industry-wide conversion rate benchmarks
• Popular widget configuration trends
• Geographic usage patterns
• Performance statistics by business category

Important Notes:

• All published statistics are aggregated and anonymized
• We do NOT disclose personally-identifying information
• Individual client data is never revealed
• Clients can opt out of inclusion in aggregated statistics

================================================================================

SECTION 14: LINKS TO EXTERNAL SITES

Our services may contain links to external websites not operated by us:

Client Websites:

• Our widgets are installed on client websites
• Those websites have their own privacy policies
• We are not responsible for client website privacy practices

Third-Party Services:

• Links to payment processors, email services, and other tools
• Each service has its own privacy policy
• We strongly advise reviewing their policies

Partner Sites:

• Links to partner products or services
• Affiliate or referral relationships

We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites, products, or services.

================================================================================

SECTION 15: DATA BREACH NOTIFICATION

In the event of a data breach that affects your personal information:

• We will notify affected users within 72 hours of discovery
• Notification will be sent via email to your registered address
• We will describe the nature of the breach and steps being taken
• We will provide recommendations to protect your information
• We will report breaches to relevant authorities as required by law

================================================================================

SECTION 16: PRIVACY POLICY CHANGES

We may update this Privacy Policy from time to time to reflect:

• Changes in our services or features
• New legal or regulatory requirements
• Improvements to our data practices
• User feedback and suggestions

When We Update This Policy:

• We will update the "Last Updated" date at the top
• Material changes will be prominently announced on our website
• Significant changes may require your consent
• Continued use of services constitutes acceptance of changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

================================================================================

SECTION 17: CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Crave Media

Email: support@cravemedia.io
Phone: 8019174935
Website: https://www.cravemedia.io/

Response Time:
We aim to respond to all privacy inquiries within 5 business days.

For urgent security concerns, please mark your message as "URGENT - SECURITY" for priority handling.

================================================================================

By using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Thank you for trusting Crave Media with your information.