Privacy Policy

Hello, and welcome. We made Crozzroads™ for people who are moving through change — and we believe that trust is the foundation of every good transition.

This privacy policy explains, in plain language, what we collect, why we use it, and the choices you have. We've written it as we'd talk — not as lawyers would. If you have questions, you can always reach us at hello@crozzroads.io.

What we collect

When you use Crozzroads, we collect:

• ·Account information — your name and email address when you register or become a member.
• ·Journal entries and worksheet responses — the reflections you write in your personal journal and the answers you share in transition worksheets.
• ·Booking details — your name, email, and any notes you share when booking a session with a practitioner or service provider.
• ·Payment information — processed securely through Stripe. We never see or store your full card number.
• ·Usage data — basic information like your browser type and device, so the site works properly for you.

Why we use your information

We use your information to:

• ·Provide the services you ask for — sessions, memberships, journaling, and community gatherings.
• ·Communicate with you about your bookings, your membership, and occasional updates from the community.
• ·Improve Crozzroads so it serves people in transitions better and better.
• ·Protect the platform and everyone on it from fraud and abuse.

We never sell your personal information. We don't share it with advertisers. We don't trade it. Your reflections are yours.

Third-party services

We use Stripe to process payments securely. Stripe handles your card information — it never touches our servers. You can read Stripe's privacy policy at stripe.com/privacy.

We may also use analytics tools to understand, in aggregate, how people move through the site — so we can make it better. These tools don't identify you personally.

Cookies and local storage

Crozzroads uses essential cookies and local storage to keep you signed in, remember your journal entries between sessions, and remember your preferences. These are necessary for the site to function — we don't use tracking or advertising cookies.

You can clear cookies and local storage in your browser settings at any time. Doing so will sign you out and remove any locally saved journal drafts.

How long we keep your information

We keep your account information and journal entries for as long as your account is active. If you cancel your membership, your account data is retained so you can return — but you can request full deletion at any time (see below).

Payment records are retained as required by law for accounting and tax purposes, but they don't include your full card number.

Your choices and rights

You always have control over your information. You can:

• ·Access the information we hold about you by emailing us.
• ·Update your profile details in your account settings.
• ·Delete your account and personal information at your request. We'll remove it within 30 days, except where we're legally required to retain records.
• ·Opt out of non-essential communications at the link in any email we send.

To exercise any of these rights, contact us at hello@crozzroads.io.

Children's privacy

Crozzroads is for adults. We don knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

Data security

Crozzroads is built on the Base44 platform, which maintains rigorous, independently audited security standards. Your data is encrypted at rest and in transit — meaning it is protected both while moving between you and our servers and while stored.

Base44 holds SOC 2 Type II certification (confirmed by independent audit) and ISO 27001 certification for information security. The platform undergoes regular penetration testing by internal and third-party teams, runs a bug bounty program for responsible vulnerability disclosure, and maintains GDPR-compliant data processing practices. A Data Processing Agreement is available on request at base44.com/dpa.

Payment processing is PCI DSS-certified through Stripe, and we never store your full card number. Your data is stored on servers in the United States, and all vendors that receive your data are bound by strict data processing agreements using approved transfer mechanisms like Standard Contractual Clauses.

Only a small, authorized team can access account data — and only when needed to help you. When you delete your account, we trigger a GDPR-compliant deletion process across all systems and subprocessors.

No system is perfectly secure, but we treat your data with the same care we'd want for our own. You can review the full details at the Base44 Security Trust Center.

Changes to this policy

We may update this privacy policy from time to time. When we do, we'll change the "last updated" date at the top. If something changes materially, we'll let you know by email or in the app.

Contact us

If you have questions about this policy or your personal data, write to us at hello@crozzroads.io. We'll respond — thoughtfully and personally — as soon as we can.