Privacy Policy

1. Introduction

Welcome to Crispy Umbrella ("we," "our," or "us"), operated by CrispyUmbrella LLC, an Indiana limited liability company. We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our disaster recovery as a service platform.

By using Crispy Umbrella, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name and email address (via Google OAuth authentication)
• Company name and organization details
• Contact information for disaster recovery stakeholders
• Payment and billing information

2.2 Technical Information

We automatically collect certain information when you use our service:

• Network infrastructure data discovered through our agents and scans
• Asset inventory information (IP addresses, hostnames, operating systems, services)
• Backup status and metadata from integrated cloud providers
• Log data, including IP addresses, browser type, and access times
• Usage data and analytics about how you interact with our platform

2.3 Third-Party Integration Data

When you connect third-party services (AWS, Azure, GCP, Veeam, Datto), we collect:

• API credentials and access tokens (stored encrypted)
• Resource configuration and backup status information
• Metadata about your cloud infrastructure

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our disaster recovery services
• Discover and monitor your network infrastructure and backups
• Generate disaster recovery plans and compliance documentation
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Process payments and billing
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security vulnerabilities
• Comply with legal obligations and protect our rights

4. Artificial Intelligence and Automated Processing

4.1 AI-Powered Features

Crispy Umbrella uses artificial intelligence (AI) and machine learning technologies to enhance our disaster recovery services. These features include:

• Automated generation of disaster recovery plans and documentation
• Intelligent analysis of your infrastructure and backup configurations
• Recommendations for improving your disaster recovery posture
• Natural language processing for SOP (Standard Operating Procedure) analysis
• Automated summarization and organization of recovery procedures

4.2 Third-Party AI Services

To provide these AI-powered features, we use trusted third-party AI service providers, including:

• OpenAI: For natural language processing and content generation
• Anthropic: For AI-assisted analysis and recommendations

When using these services, your data is transmitted securely and processed according to each provider's enterprise data handling policies. We have agreements with these providers that prohibit them from using your data to train their AI models.

4.3 Your Data and AI Training

We do NOT use your data—including disaster recovery plans, SOPs, infrastructure information, or any other customer content—to train AI models. Your data is used solely to provide you with our services.

4.4 Human Oversight

AI-generated content and recommendations are provided as suggestions to assist your disaster recovery planning. You maintain full control over all final decisions and should review AI-generated content before implementation. Critical disaster recovery procedures should always be verified by qualified personnel.

5. Document and SOP Storage

5.1 Types of Documents Stored

Our platform allows you to store and manage disaster recovery-related documents, including:

• Standard Operating Procedures (SOPs)
• Disaster recovery plans and runbooks
• Network diagrams and infrastructure documentation
• Contact trees and escalation procedures
• Compliance documentation and audit records
• Training materials and certifications

5.2 Document Security

All documents and SOPs are protected with enterprise-grade security:

• Encryption at Rest: All documents are encrypted using AES-256 encryption
• Encryption in Transit: All data transmission uses TLS 1.3
• Access Control: Role-based permissions determine who can view, edit, or delete documents
• Audit Logging: All document access and modifications are logged
• Secure Deletion: When documents are deleted, they are securely purged from our systems

5.3 Document Ownership

You retain full ownership of all documents, SOPs, and content you upload to our platform. We do not claim any intellectual property rights over your content. You may export or delete your documents at any time.

6. Data Storage and Security

6.1 Security Measures

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using TLS/SSL
• API keys and credentials are hashed using bcrypt
• Pull-only agent architecture to minimize security exposure
• Role-based access control (RBAC) for user permissions
• Regular security audits and vulnerability assessments
• Data encryption at rest for sensitive information

6.2 Data Retention

We retain your information for as long as your account is active or as needed to provide services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

7. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist in operating our platform (cloud hosting, payment processing, analytics)
• Legal Requirements: We may disclose information if required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
• With Your Consent: We may share information with your explicit consent

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Opt out of marketing communications
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us at privacy@crispyumbrella.ai.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

10. Third-Party Links

Our service may contain links to third-party websites or services that are not owned or controlled by Crispy Umbrella. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our service, you consent to such transfers.

12. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

13. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

14. GDPR Compliance

If you are located in the European Economic Area (EEA), we process your personal data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing include:

• Contract performance (providing our services)
• Legitimate interests (improving our services, security)
• Legal compliance
• Consent (where applicable)

15. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

16. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@crispyumbrella.ai
• Email: support@crispyumbrella.ai