Regional Privacy Disclosures
Last Updated: November 1, 2025
This section supplements the Crushi Privacy Policy and applies to users located in specific regions such as the European Economic Area (EEA), the United Kingdom (UK), and the United States (US).
It provides additional details about your privacy rights and how we handle personal data in compliance with applicable regional laws.
1. European Economic Area (EEA) and United Kingdom (UK)
If you are located in the EEA or the UK, the General Data Protection Regulation (GDPR) and the UK GDPR apply to our processing of your personal data.
Data Controller
For purposes of data protection law, the data controller responsible for your personal information is:
Alperen Ltd. (Crushi)
Agias Fylaxeos 123, Limassol, Cyprus
[email protected]
Legal Bases for Processing
We process personal data only when we have a lawful basis under GDPR. These include:
| Legal Basis | Description |
|---|---|
| Performance of a Contract | To provide, operate, and maintain your Crushi account and Services. |
| Consent | When you voluntarily share personal data, enable cookies, or opt into marketing communications. |
| Legitimate Interests | To improve our Services, develop new features, and prevent fraud, provided your rights are not overridden. |
| Compliance with Legal Obligations | To meet tax, accounting, and data protection laws or respond to legal requests. |
| Protection of Vital Interests | In rare cases, to protect your or another person's life or safety. |
Your GDPR Rights
Under applicable EU and UK data protection laws, you may have the following rights:
- Access: Obtain a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete information.
- Erasure: Request deletion of your data ("right to be forgotten").
- Restriction: Limit processing of your data in specific circumstances.
- Data Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to data processing based on legitimate interests or for direct marketing.
- Withdraw Consent: Revoke consent at any time when processing is based on consent.
- Complaint: File a complaint with your local data protection authority.
To exercise these rights, contact us at [email protected]. We will respond within 30 days, or as required by law.
International Data Transfers
Your data may be transferred to and processed in countries outside your own (including the United States or other jurisdictions).
When we transfer personal data outside the EEA or UK, we rely on:
- Adequacy decisions issued by the European Commission, or
- Standard Contractual Clauses (SCCs) approved under GDPR to ensure appropriate data protection safeguards.
2. United States (California, Virginia, Colorado, Connecticut, Utah)
If you reside in the United States, specific privacy laws may grant you rights regarding your personal data. These include the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and similar laws in other states.
Your U.S. Privacy Rights
Depending on your state of residence, you may have the following rights:
- Right to Know / Access: Request details about the categories and specific pieces of personal information collected about you.
- Right to Delete: Request deletion of personal information we hold about you.
- Right to Correct: Request correction of inaccurate data.
- Right to Opt Out of Sales or Sharing: Opt out of the "sale" or "sharing" of personal information (Crushi does not sell your data).
- Right to Limit Use of Sensitive Information: Restrict processing of sensitive data.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
You can exercise these rights by emailing us at [email protected] or through our Support Center: https://support.crushi.ai.
To protect your data, we may verify your identity before responding to requests.
Categories of Personal Information Collected
In the last 12 months, we may have collected the following categories of personal information (as defined under CCPA/CPRA):
| Category | Examples | Purpose of Use |
|---|---|---|
| Identifiers | Name, email, IP address, username | Account creation, authentication, analytics |
| Commercial Information | Purchases, token transactions | Billing, service provision |
| Internet Activity | Browsing, chat usage, clicks | Analytics, personalization, security |
| Geolocation Data | IP-based location | Localization, fraud prevention |
| Audio/Visual Data | Voice or image generation content | AI functionality |
| Inferences | User preferences, interests | Personalization, recommendations |
| Sensitive Information | Login credentials, messages | Authentication, service operation |
We collect and use this data for the business purposes described in the main Privacy Policy.
We do not "sell" personal information as defined by the CCPA.
Authorized Agents
You may designate an authorized agent to make privacy requests on your behalf.
To do so, you must provide written permission and verification of identity.
3. Other Regions
For users located outside the EEA, UK, or US, Crushi also complies with local data protection and consumer privacy laws applicable in your jurisdiction. You may contact us directly to understand your local rights or request data access/deletion.
4. Contact and Data Protection Officer
If you have any questions about how we handle your personal data or wish to exercise your rights, please contact us:
If you are located in the EU or UK, you may also contact your local Data Protection Authority (DPA).
A list of EU DPAs is available here: https://edpb.europa.eu/about-edpb/board/members_en