Privacy policy

Who we are

Crystallite Software ("Crystallite", "we", "us") is a software development studio that builds games, SaaS platforms, AI products, and mobile apps for client companies. We are the data controller for the personal information described in this policy.

You can reach us about anything in this policy at corporate@crystallite.io.

What this policy covers

This policy covers crystallite.io and any personal information you share with us directly, for example by email or through the contact page. It also covers the business contact details we hold about people at client and partner companies.

It does not cover the products we build for clients. Each client decides how their product handles personal data and publishes its own privacy policy.

Information we collect

We collect only what we need to answer you and to run our business.

• Contact details you give us: your name, email address, company, and anything you write in a message. The contact form on this site opens your own email app; it does not store your message on our servers.
• Business records during an engagement: names, roles, work email addresses, meeting notes, and correspondence with people at client companies.
• Technical information from this website: our hosting provider records standard server logs, including IP address, browser type, pages requested, and timestamps, for security and capacity planning.

We do not use advertising trackers, social media pixels, or cross-site tracking on this website.

How we use it

We use personal information to:

• reply to your enquiry and discuss a potential project
• deliver, invoice, and support the work we have agreed with a client
• keep this website secure and available
• meet legal and accounting obligations

We do not sell personal information, and we do not use it to send marketing you have not asked for.

Legal basis

Where the General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on the following legal bases: performance of a contract or steps taken at your request before entering one, when we discuss or deliver a project; our legitimate interests in running and protecting our business, when we keep business records and server logs; and compliance with legal obligations, when we keep accounting records.

Where we ever rely on consent, you can withdraw it at any time by writing to corporate@crystallite.io.

Cookies and analytics

This website does not set cookies for tracking or advertising. If we add privacy-respecting analytics in future, we will describe it here and, where the law requires, ask for your consent first.

Who we share it with

We share personal information only with:

• service providers that help us run the business, such as email, hosting, document storage, and accounting software, under contracts that limit what they may do with it
• professional advisers, such as accountants and lawyers, where needed
• authorities, where the law requires it or to protect our rights

If Crystallite is ever acquired or merged, personal information may transfer to the new owner under the same protections.

International transfers

Some of our service providers operate outside the country you live in. Where personal information leaves the European Economic Area or the United Kingdom, we rely on an adequacy decision or on standard contractual clauses approved by the relevant authority.

How long we keep it

Enquiries that do not lead to a project are deleted within 12 months of our last exchange. Records relating to a client engagement are kept for the life of the contract and for seven years afterwards, to meet accounting and legal requirements. Server logs are kept for no more than 90 days.

Security

We protect personal information with access controls, encryption in transit, two-factor authentication on the tools we use, and the principle that only the people who need to see something can. No method is perfect, so if you believe your information has been exposed, tell us at corporate@crystallite.io and we will investigate.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you
• correct it if it is inaccurate
• ask us to delete it
• restrict or object to how we use it
• receive a copy in a portable format
• complain to a supervisory authority

To exercise any of these rights, write to corporate@crystallite.io. We will respond within one month. We may ask you to confirm your identity first.

Children

This website and our services are intended for businesses. We do not knowingly collect personal information from anyone under 16. If you think a child has sent us information, contact us and we will delete it.

Changes to this policy

When we change this policy, we update the effective date at the top of the page. If a change materially affects how we use your information, we will tell you by email where we have an address for you.

Contact

Questions about privacy at Crystallite go to corporate@crystallite.io.