Privacy Policy
Crystara Labs Inc. (歐晶科技有限公司) ("Crystara", "we", "us") respects the privacy of every user. This policy explains how we collect, use, store and protect your personal data when you visit our website or use our products — including EditOn AI, MailFox, Kumei, and Mailisa.
1. What we collect
- Information you give us directly: name, email address, account settings, and anything you submit through the contact form.
- Product usage data: text snippets that EditOn AI sends to AI providers (not permanently linked to your identity); MailFox delivery logs; food photos and recognition results you upload to Kumei.
- Mailisa content you submit: the email or message text you paste, and any screenshots you upload, are sent to an AI provider to generate a reply. We do not store this content on our servers — after a reply is generated, we keep only metadata (a hashed device identifier, a salted hash of your IP, a coarse country derived from it, and the model, token counts, cost and timestamp of the request). If you join a waitlist, we store the email address you provide.
- Automatically collected technical data: IP address, device type, browser, operating system, access timestamps, and error logs.
- What we don't collect: we don't sell personal data, and we don't use advertising-tracking cookies.
2. How we use your data
- To provide, maintain and improve our products and services.
- To reply to your inquiries and provide customer support.
- To detect and prevent fraud, abuse, or violations of our terms.
- To comply with legal obligations (e.g. tax, regulatory requirements).
3. Data retention
We keep your data only as long as needed for the purposes above. Contact form messages are kept for up to 24 months; account data is deleted within 30 days of account closure; aggregated anonymous analytics may be retained longer. Mailisa waitlist email addresses are kept until you ask us to remove them (email privacy@crystaralabs.com).
4. Third-party services
To deliver our services, we use the following categories of processors: cloud hosting (AWS, Cloudflare), AI inference (large-language-model providers such as OpenAI — for necessary text snippets in EditOn AI, and for the message text and screenshots you submit in Mailisa; this content is processed to generate output and, per the provider's API terms, is not used to train their models and is retained by them only briefly for abuse monitoring), email infrastructure (Postmark, Amazon SES — used by MailFox), and privacy-respecting analytics. These providers only access data strictly necessary to perform their function.
5. Your rights (GDPR & Taiwan PDPA)
- Access and obtain a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Withdraw consent, restrict processing, or object to specific processing.
- Data portability.
To exercise any of these rights, email privacy@crystaralabs.com.
6. Children's privacy
Our products are not directed to children under 13 (higher for some products). If we discover that we've collected data from a child under 13, we will delete it promptly.
7. International transfers
Your data may be processed and stored outside Taiwan, including in Singapore and the United States. We use contractual safeguards and appropriate technical measures to ensure your data remains protected.
8. Security
We use TLS encryption in transit, encryption at rest, least-privilege access controls, and regularly review our security practices. Despite all of this, no internet transmission is 100% secure.
9. Changes to this policy
We may update this policy from time to time. The effective date at the top reflects the latest version. For material changes, we'll notify you by email or in-product notice.
10. Contact
Crystara Labs Inc. · 歐晶科技有限公司
Privacy questions: privacy@crystaralabs.com
General contact: hello@crystaralabs.com
Location: Taipei, Taiwan