Privacy

Last updated 19 October 2026 · IDYeah Studio LLC, California, United States.

What we collect. An account (your email, via our sign-in provider), the projects and runs you create, and the things you give an agent to look at — pasted text, links, and uploaded screenshots or files. We also keep basic logs and error reports to keep the service running.

How we use it. To run the agents you ask for, to show you your work and history, and to operate the service. Audit-content improvement use is a separate, optional choice described below. Your prompts and files are sent to our model provider (Anthropic) to generate a response. We don't sell your data, and we don't show ads.

Usage and diagnostics. Crit counts page views in daily totals by broad page category. This counter does not store visitor identifiers, full URLs, query strings, or report contents, and does not set cookies. It respects browser Do Not Track and Global Privacy Control signals. An address-derived, daily hash may be processed temporarily by the rate limiter to prevent abuse. Hosting and security logs can contain IP addresses and request metadata. Where error monitoring is enabled, Sentry receives diagnostic information to help investigate failures. Authorized operators can see account email addresses and the approximate country of available sign-in activity supplied by Clerk, to identify accounts and provide support. This is not a precise or verified location. For review activity, Crit also records the browser name and approximate country and state or region supplied by its hosting provider. Internal completion emails include the account email, project title, review type, browser, and approximate region, without report content or screenshots. Crit records run status, model names, token usage, and payment references for operations and billing; these are accessible only to authorized operators. Sign-in uses essential authentication cookies.

Payments. For one-time purchases and subscriptions, Stripe handles the payment. We never see your card details — Stripe stores them; Crit receives customer and transaction identifiers, payment status, and billing information needed to fulfill purchases.

The free `/try` audit. When you use the no-login audit, we fetch the page you name and store the resulting audit briefly so it can be shared by link; it expires on its own. No account is created.

Sharing. A run is private to you unless you create a share link. A share link is readable by anyone who has it; you can revoke it.

Help improve Crit. This optional setting is off by default. It saves permission for future improvement review; audit-content collection for this program is not active yet. If introduced, authorized Crit reviewers may use new full-audit reports started in the web app, and the context and links you type, to evaluate and improve Crit's findings. Uploaded screenshots and files themselves, earlier audits, and inherited re-audit comparisons are excluded. Reports may still describe or quote supplied material. Nothing is published or used to train AI models under this permission. Turning the setting off withdraws permission for further improvement use; enabling it again applies only to new audits. It does not delete your saved work or affect private project re-audits, audit quality, or plan allowances. The choice is recorded with its purpose, policy version, and time; new uses require a separately reviewed permission and data-handling process.

Feedback. When you use the feedback affordance (the pen icon), your message plus your email + the page you were on gets sent to Vishal so he can reply directly. That's the whole system — one human reading each note.

Subprocessors. The service providers used to operate Crit:

Your choices. Deleting a project hides it from the app; it does not immediately erase all stored records. To request access, correction, export, or deletion of your personal data, or to ask about account deletion, email keya@idyeah.studio.

Retention and transfers. Account, project, and report records are retained to provide your history and the service. Billing, security, and backup records may be retained longer where needed for legal obligations, fraud prevention, or recovery. Deletion requests are reviewed subject to those requirements. IDYeah Studio LLC operates in the United States; its providers may process data in the US and other locations under their service terms. Access is limited to the operator and providers that need it to deliver, maintain, or secure Crit.

AI processing. Submitted text, screenshots, page content, and context are processed by Anthropic to produce your review. Crit does not use your private reports or uploads to train its own AI model. Anthropic's commercial API terms govern its processing; do not submit confidential material unless you have permission to share it with these providers.

Figma plugin. Selected frame screenshots, review context, and the original review used for comparisons are sent to Crit and Anthropic for analysis. Saved snapshots and reviews remain in Figma plugin storage on your device; they are not shared cloud reports. The plugin API stores usage metadata, including a monthly hashed network identifier for guest limits, request status, model, and token counts, to enforce allowances and operate the service. It does not store screenshot or report content in its usage records. Plugin allowances are separate from Crit web. Connecting an account stores your account identifier, a hashed session token, and allowance records. Stripe processes plugin purchases; Crit retains the payment references needed to provide and reconcile reviews. Connection codes expire after ten minutes; sessions expire after thirty days and can be revoked with Disconnect. Expired connection codes and expired or revoked sessions are removed by scheduled cleanup after a short retention period. You can remove saved reviews within the plugin.

Policy changes. Material changes will be described here and notified where required. The date above identifies the current policy. For privacy questions or requests, contact keya@idyeah.studio.