Privacy policy.

We collect the data we need to run Crowtado: account details (name, email, phone), payment information (method and minimal tokenized identifiers), your submissions (voice, video, photos), and the metadata we need to verify them (location, device class, capture timestamps).

We don't collect biometric data beyond what's in a voice clip or photo, and we don't run face recognition on contributor uploads, except to confirm liveness during initial verification.

Account and payment data is used to run the service and pay contributors. Submissions and their metadata become the rights-cleared training data product we sell to enterprise customers.

Every submission includes a signed consent form, in the contributor's preferred language. We don't reuse submissions outside of what that consent allows.

Submissions, with metadata, are delivered to enterprise customers under their license. Contributor identities are pseudonymized in delivery; the legal chain is kept separately, under audit access.

We share the minimum required data with payment providers (Stripe, M-Pesa, PayPal) to settle payouts. We don't sell, rent, or publish contributor data for advertising.

Account data is kept while your account is active, and for 18 months after closure for tax and audit reasons. Submissions are kept in the catalog for as long as the original consent allows, typically the lifetime of the dataset, with revocation rights in section 06.

Payout records are kept for the period required by financial regulations in your country (usually 5–7 years).

Crowtado stores data in regional clusters: US (us-east), EU (eu-central), and APAC (ap-south). Contributor uploads are stored closest to the contributor at capture time; we don't move data across regions without notice.

All data is encrypted at rest with AES-256 and in transit with TLS 1.3. Production access is logged and reviewed quarterly under our SOC 2 program.

You can access, export, correct, or delete your account data at any time from the dashboard. You can revoke consent on individual submissions; revoked submissions are removed from active distribution within 30 days, with a redacted audit record kept.

Residents of the EU, UK, California, India, and Brazil have additional rights under GDPR, UK GDPR, CCPA/CPRA, DPDP, and LGPD. Email privacy@crowtado.com to use them.

Privacy questions: privacy@crowtado.com

Data protection officer: dpo@crowtado.com

Postal: Crowtado, 320 Atlantic Ave, Brooklyn, NY 11201, USA.