Privacy Policy

Overview

Crumb provides publishing tools for recipe creators. This policy explains what information we collect, why we use it, when we share it, and the choices available to you when using Crumb websites, dashboards, and connected services.

Information we collect

We collect account details such as your name, email address, authentication identifiers, organization memberships, publication settings, recipes, assets, and support communications. We also collect routine technical information including request timestamps, browser details, and IP addresses for security and service operation.

When you connect Instagram, Meta provides the professional account identifier, username, access token, and media you authorize us to read. We may process post captions, permalinks, timestamps, media types, images, and thumbnails to identify recipes and create recipe drafts. Crumb does not publish to Instagram through this integration.

How we use information

We use information to authenticate users, operate publications, import authorized content, create recipe drafts, store media, provide support, secure the service, diagnose failures, and comply with legal obligations. Recipe captions may be sent to an AI model solely to extract structured recipe information for the requested Crumb feature.

Service providers and disclosures

We use service providers for hosting, databases, object storage, content delivery, authentication, email, and AI processing. These providers receive only the information needed to perform services for Crumb. We may also disclose information when legally required, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information.

Storage, security, and retention

Instagram access tokens are encrypted at rest. We use access controls, scoped credentials, and authenticated callbacks to protect connected accounts. We retain information while your account or publication remains active and as needed for service operation, security, legal compliance, and dispute resolution. You can disconnect Instagram at any time. A verified Meta data-deletion request removes the connection, imported media records, copied Instagram assets, and recipes generated from those records.

Your choices and rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal information. You can manage publication content in the dashboard and follow our data-deletion instructions for connected Instagram information. We may need to verify your identity before completing a request.

International processing and children

Crumb and its providers may process information in countries other than your own, with safeguards appropriate to the service and applicable law. Crumb is not directed to children under 13, and we do not knowingly collect their personal information.

Changes and contact

We may update this policy as the service changes. Material updates will be reflected by a new effective date. Questions and privacy requests can be sent to privacy@crumb.so.