Privacy Policy

CRAUB Inc ("Peepbox," "we," "us," or "our"), based in Orange County, California, operates the Peepbox desktop application and the peepbox.ai website. This Privacy Policy describes how we collect, use, and protect your information.

1. Information We Collect

Account Information

When you create an account, we collect your email address. This is used for authentication, billing communications, and account management.

Usage Data

We collect anonymized usage metrics including model calls, token counts, and feature usage. This helps us meter subscription limits and improve the service.

Payment Information

Payments are processed by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards. We receive only a Stripe customer ID and subscription status.

2. What We Do NOT Collect

We never store screenshots, screen content, or anything your Peeps see.

When a Peep captures a screenshot, the image is sent directly to the AI provider (Anthropic) for processing via our managed proxy. Our proxy passes the image data through without logging, storing, or retaining it. Once the AI provider returns a response, the screenshot data is discarded. We do not have access to, and do not retain, any visual content from your screen.

3. How We Use Your Information

• Account management — to authenticate you and manage your subscription
• Billing — to process payments and enforce plan limits
• Usage metering — to track token consumption against your plan's allowances
• Service improvement — to understand usage patterns and improve Peepbox
• Communications — to send account-related emails (password resets, billing notices)

4. Third-Party Services

We use the following third-party services to operate Peepbox:

• Anthropic — AI inference processing (screenshots are sent to Anthropic's API for analysis)
• Stripe — payment processing and subscription management
• Amazon Web Services (AWS) — infrastructure, authentication (Cognito), and data storage
• Cloudflare — DNS and CDN

Each third party processes data in accordance with their own privacy policies. We encourage you to review them.

5. Data Retention

Account data (email, subscription status, usage metrics) is retained while your subscription is active. If you cancel, your data is retained for up to 90 days to allow for reactivation, after which it is deleted. You may request immediate deletion at any time by emailing support@peepbox.ai.

6. Cookies and Local Storage

The peepbox.ai website does not use cookies. The Peepbox desktop application stores authentication tokens and preferences in local storage on your device only. No tracking cookies or third-party analytics scripts are used.

7. Your Rights (CCPA / GDPR)

Regardless of where you are located, you have the right to:

• Access — request a copy of the personal data we hold about you
• Deletion — request that we delete your personal data
• Export — request your data in a portable format
• Correction — request correction of inaccurate data

To exercise any of these rights, email support@peepbox.ai. We will respond within 30 days.

8. Children

Peepbox is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

9. Security

We use industry-standard security measures including encryption in transit (TLS), encrypted storage, and secure authentication via AWS Cognito. However, no method of electronic transmission or storage is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email at least 30 days before the changes take effect. The "Effective" date at the top of this page indicates when this policy was last updated.

11. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

CRAUB Inc
Orange County, California
support@peepbox.ai