Privacy Policy
Crystara Labs Inc. (歐晶科技有限公司) ("Crystara", "we", "us") respects the privacy of every user. This policy explains how we collect, use, store and protect your personal data when you visit our website or use our products — including EditOn AI, MailFox, and Kumei.
1. What we collect
- Information you give us directly: name, email address, account settings, and anything you submit through the contact form.
- Product usage data: text snippets that EditOn AI sends to AI providers (not permanently linked to your identity); MailFox delivery logs; food photos and recognition results you upload to Kumei.
- Automatically collected technical data: IP address, device type, browser, operating system, access timestamps, and error logs.
- What we don't collect: we don't sell personal data, and we don't use advertising-tracking cookies.
2. How we use your data
- To provide, maintain and improve our products and services.
- To reply to your inquiries and provide customer support.
- To detect and prevent fraud, abuse, or violations of our terms.
- To comply with legal obligations (e.g. tax, regulatory requirements).
3. Data retention
We keep your data only as long as needed for the purposes above. Contact form messages are kept for up to 24 months; account data is deleted within 30 days of account closure; aggregated anonymous analytics may be retained longer.
4. Third-party services
To deliver our services, we use the following categories of processors: cloud hosting (AWS, Cloudflare), AI inference (large-language-model providers such as OpenAI, only for necessary snippets in EditOn AI), email infrastructure (Postmark, Amazon SES — used by MailFox), and privacy-respecting analytics. These providers only access data strictly necessary to perform their function.
5. Your rights (GDPR & Taiwan PDPA)
- Access and obtain a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Withdraw consent, restrict processing, or object to specific processing.
- Data portability.
To exercise any of these rights, email privacy@crystaralabs.com.
6. Children's privacy
Our products are not directed to children under 13 (higher for some products). If we discover that we've collected data from a child under 13, we will delete it promptly.
7. International transfers
Your data may be processed and stored outside Taiwan, including in Singapore and the United States. We use contractual safeguards and appropriate technical measures to ensure your data remains protected.
8. Security
We use TLS encryption in transit, encryption at rest, least-privilege access controls, and regularly review our security practices. Despite all of this, no internet transmission is 100% secure.
9. Changes to this policy
We may update this policy from time to time. The effective date at the top reflects the latest version. For material changes, we'll notify you by email or in-product notice.
10. Contact
Crystara Labs Inc. · 歐晶科技有限公司
Privacy questions: privacy@crystaralabs.com
General contact: hello@crystaralabs.com
Location: Taipei, Taiwan