Effective Date: April 29, 2026
Last Updated: April 29, 2026
Krystl (“we,” “our,” or “us”) operates the Krystl platform at app.krystl.io and the marketing site at krystl.io. This Privacy Policy explains how we collect, use, and protect your information.
1. Information We Collect
- Account Information: Name, email address, and business details when you create a Krystl account.
- Business Profile Data: Information about your business including industry, type, and location.
- Connected Platform Data: When you connect third-party platforms (Meta Ads, Google Analytics, Google Ads), we access performance data — impressions, clicks, spend, conversions — only as authorized by you.
- Usage Data: How you interact with the Krystl platform.
- Billing Information: Processed by Stripe. Krystl does not store your full payment card details.
2. How We Use Your Information
- Provide, operate, and improve the Krystl platform.
- Generate marketing insights, health scores, and recommendations from your connected data.
- Process payments and manage your subscription.
- Send transactional communications: magic link login emails, account notices, weekly digests.
- Provide customer support.
3. AI-Powered Features
Krystl uses artificial intelligence, including OpenAI’s API, to generate marketing insights. Your business data may be sent to OpenAI for processing. OpenAI does not use your data to train its models under our enterprise agreement. All AI-generated outputs are clearly labeled within the platform.
4. Data Sharing
We do not sell your personal information. We share data only:
- With service providers who operate the platform: DigitalOcean (hosting), Stripe (payments), OpenAI (AI features).
- When required by law or to protect the rights and safety of Krystl and its users.
- With your connected third-party platforms (Meta, Google) solely to authenticate and retrieve your authorized data.
5. Data Storage and Security
Your data is stored on DigitalOcean managed infrastructure in Amsterdam (AMS3), European Union. We use TLS encryption in transit and AES-256-GCM encryption for stored OAuth tokens. We implement industry-standard security practices.
6. Your Rights
- Access, correct, or delete your personal information — email privacy@krystl.io.
- Disconnect any connected platform at any time from your account settings.
- Request a copy of your data.
- Close your account — data deleted within 30 days.
7. Cookies
Krystl uses essential cookies for authentication and session management only. We do not use advertising cookies or sell cookie data to third parties.
8. Third-Party Platform Privacy
When you connect Meta Ads, Google Analytics, or other platforms, your use of those platforms is governed by their respective privacy policies. Krystl is not responsible for third-party privacy practices.
9. Children’s Privacy
Krystl is a B2B platform for business owners and professionals. We do not knowingly collect information from individuals under 18 years of age.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a platform notice. Continued use of Krystl after changes constitutes acceptance.
11. Contact Us
For privacy-related questions: privacy@krystl.io
Krystl | krystl.io