Privacy

Last updated 19 October 2026 · IDYeah Studio LLC, California, United States.

What we collect. An account (your email, via our sign-in provider), the projects and runs you create, and the things you give an agent to look at — pasted text, links, and uploaded screenshots or files. We also keep basic logs and error reports to keep the service running.

How we use it. To run the agents you ask for, to show you your work and history, and to operate the service. Audit-content improvement use is a separate, optional choice described below. Your prompts and files are sent to our model provider (Anthropic) to generate a response. We don't sell your data, and we don't show ads.

Usage and diagnostics. Crit8 counts page views in daily totals by broad page category. This counter does not store visitor identifiers, full URLs, query strings, or report contents, and does not set cookies. It respects browser Do Not Track and Global Privacy Control signals. An address-derived, daily hash may be processed temporarily by the rate limiter to prevent abuse. Hosting and security logs can contain IP addresses and request metadata. Where error monitoring is enabled, Sentry receives diagnostic information to help investigate failures. Authorized operators can see account email addresses and the approximate country of available sign-in activity supplied by Clerk, to identify accounts and provide support. This is not a precise or verified location. For audit activity, Crit8 also records the browser name and approximate country and state or region supplied by its hosting provider. Internal completion emails include the account email, project title, audit type, browser, and approximate region, without report content or screenshots. Crit8 records run status, model names, token usage, and payment references for operations and billing; these are accessible only to authorized operators. Sign-in uses essential authentication cookies.

Payments. For one-time purchases and subscriptions, Stripe handles the payment. We never see your card details — Stripe stores them; Crit8 receives customer and transaction identifiers, payment status, and billing information needed to fulfill purchases.

The free `/try` audit. When you use the no-login audit, we fetch the page you name and store the resulting audit briefly so it can be shared by link; it expires on its own. No account is created.

Sharing. A run is private to you unless you create a share link. A share link is readable by anyone who has it; you can revoke it.

Help improve Crit8. This optional setting is off by default. It saves permission for future improvement audit; audit-content collection for this program is not active yet. If introduced, authorized Crit8 reviewers may use new full-audit reports started in the web app, and the context and links you type, to evaluate and improve Crit8's findings. Uploaded screenshots and files themselves, earlier audits, and inherited re-audit comparisons are excluded. Reports may still describe or quote supplied material. Nothing is published or used to train AI models under this permission. Turning the setting off withdraws permission for further improvement use; enabling it again applies only to new audits. It does not delete your saved work or affect private project re-audits, audit quality, or plan allowances. The choice is recorded with its purpose, policy version, and time; new uses require a separately approved permission and data-handling process.

Feedback. When you use the feedback affordance (the pen icon), your message plus your email + the page you were on gets sent to Vishal so he can reply directly. That's the whole system — one human reading each note.

Subprocessors. The service providers used to operate Crit8:

Your choices. Deleting a project hides it from the app; it does not immediately erase all stored records. To request access, correction, export, or deletion of your personal data, or to ask about account deletion, email crit8@idyeah.studio.

Retention and transfers. Account, project, and report records are retained to provide your history and the service. Billing, security, and backup records may be retained longer where needed for legal obligations, fraud prevention, or recovery. Deletion requests are assessed subject to those requirements. IDYeah Studio LLC operates in the United States; its providers may process data in the US and other locations under their service terms. Access is limited to the operator and providers that need it to deliver, maintain, or secure Crit8.

AI processing. Submitted text, screenshots, page content, and context are processed by Anthropic to produce your audit. Crit8 does not use your private reports or uploads to train its own AI model. Anthropic's commercial API terms govern its processing; do not submit confidential material unless you have permission to share it with these providers.

Figma plugin. Selected frame screenshots, audit context, and the original audit used for comparisons are sent to Crit8 and Anthropic for analysis. Saved snapshots and audits remain in Figma plugin storage on your device; they are not shared cloud reports. The plugin API stores usage metadata, including a monthly hashed network identifier for guest limits, request status, model, and token counts, to enforce allowances and operate the service. It does not store screenshot or report content in its usage records. Plugin allowances are separate from Crit8 web. Connecting an account stores your account identifier, a hashed session token, and allowance records. Stripe processes plugin purchases; Crit8 retains the payment references needed to provide and reconcile audits. Connection codes expire after ten minutes; sessions expire after thirty days and can be revoked with Disconnect. Expired connection codes and expired or revoked sessions are removed by scheduled cleanup after a short retention period. You can remove saved audits within the plugin.

Policy changes. Material changes will be described here and notified where required. The date above identifies the current policy. For privacy questions or requests, contact crit8@idyeah.studio.