01 · What we collect
We collect the data necessary to operate the Crowtado contributor network: account details (name, email, phone), payout information (rail and minimal tokenized identifiers), submitted content (voice, video, image), and the metadata required to verify it (geography, device class, capture timestamps).
We do not collect biometric data beyond what is intrinsic to a voice clip or photograph, and we do not run face recognition on contributor uploads except to confirm liveness during initial verification.
02 · Why we collect it
Account and payout data is used to run the service and pay contributors. Submitted content and its metadata is used to fulfill the rights-cleared training data product we sell to enterprise customers.
Every submission is accompanied by a written consent form whose terms are legible in the contributor's preferred language. We do not repurpose submissions for any use that falls outside the scope of that consent.
03 · Who we share it with
Submitted content, with its metadata, is delivered to enterprise customers under the terms of their license. Contributor identities are pseudonymized in delivery; the legal documentation chain is preserved separately under audit access.
We share the minimum required data with payment rails (e.g., Stripe, M-Pesa, PayPal) to settle payouts. We do not sell, rent, or publish contributor data for advertising.
04 · How long we keep it
Account data is retained while your account is active and for 18 months after closure for tax and audit reasons. Submitted content is retained as part of the catalog for as long as the original consent permits — typically the lifetime of the dataset, with revocation rights as described in section 06.
Payout records are kept for the period required by applicable financial regulation in your country (typically 5–7 years).
05 · Where it lives
Crowtado stores data in regional clusters: US (us-east), EU (eu-central), and APAC (ap-south). Contributor uploads are stored in the cluster nearest to the contributor at the time of capture; we do not move data across regions without notice.
All data is encrypted at rest with AES-256 and in transit with TLS 1.3. Production access is logged and reviewed quarterly under our SOC 2 program.
06 · Your rights
You may access, export, correct, or delete your account data at any time from the dashboard. You may revoke consent for individual submissions; revoked submissions are removed from active distribution within 30 days, with a redacted record retained for audit.
Residents of the EU, UK, California, India, and Brazil have additional rights under GDPR, UK GDPR, CCPA/CPRA, DPDP, and LGPD respectively. Contact privacy@crowtado.com to exercise them.
07 · Contact
Privacy questions: privacy@crowtado.com
Data protection officer: dpo@crowtado.com
Postal: Crowtado Press Office, 320 Atlantic Ave, Brooklyn, NY 11201, USA.