Last updated: February 2026
CronSpire ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your information when you use our website (cronspire.com) and our products, including CronSpire Flowboard.
CronSpire products are designed with privacy as a core principle. Your business data is stored locally on your device by default. We collect the minimum information necessary to provide our services. We do not sell, share, or monetise your personal or business data. We do not use advertising cookies or third-party ad trackers on any CronSpire product or website.
If you consent via our cookie banner, we use Google Analytics (with IP anonymisation enabled) to collect anonymised usage data such as pages visited, time on site, browser type, and approximate geographic region. This data helps us understand how visitors find and use our website. No personal information is collected through analytics. If you reject cookies, no analytics data is collected. We do not use advertising cookies or tracking pixels on our website.
Payments are processed by Lemon Squeezy, our payment provider. They collect your name, email address, billing address, and payment information. We receive your name and email address to deliver your license key. We do not store, process, or have access to your credit card details or payment method information.
When you enter your license key in Flowboard, the key is verified against our licensing database (hosted on Supabase). We store: your license key (hashed), associated email address, activation status, and purchase source. This information is necessary to validate your license and deliver AI credits.
Your project data, sales deals, time entries, client quotes, settings, and board configurations are stored locally in your browser's localStorage on your device. This data never leaves your device unless you explicitly enable cloud backup.
When you use AI features with your included 1,000 AI Credits, your request data is sent through CronSpire's serverless functions to the Anthropic API. This means your project/deal data passes through our Netlify infrastructure briefly to reach Anthropic's servers. We do not store, log, or retain the content of these AI requests or responses. We only track the number of credits consumed (stored in Supabase alongside your license record).
If you connect your own Anthropic API key ("BYOK"), AI requests go directly from your browser to Anthropic's API. Your data does not pass through CronSpire's servers. Your API key is stored locally in your browser's localStorage and is never transmitted to CronSpire. Usage is subject to Anthropic's privacy policy and terms.
If you choose to enable cloud backup, your data is synced to our cloud infrastructure (Supabase). This data is associated with your license key and used solely to restore your workspace on other devices. We do not access, analyse, mine, or share your business data stored in cloud backup.
The Software supports optional email notifications (follow-up reminders, overdue deals, stale projects, deal milestones). To use this feature, you configure your own email account (Gmail, Outlook, or any SMTP provider) within the Software's settings. Notification emails are sent directly from your machine using your own credentials — CronSpire does not process, route, or store these emails. Separately, CronSpire uses Resend, a third-party email delivery provider, solely for transactional emails such as license key delivery and refund confirmations. We do not use your email for marketing unless you have separately opted in.
If you email us or use our contact form, we collect your name, email address, and message content to respond to your enquiry.
We use your information to: deliver your license key and activate product access; track AI credit usage associated with your license; provide cloud backup and multi-device sync (if you enable it); send transactional emails such as license keys and refund confirmations via Resend; respond to support and sales enquiries; improve our products based on aggregate, anonymised data; and comply with legal and tax obligations.
Local data is stored in your browser's localStorage and is protected by your device's own security measures (device encryption, login credentials, etc.).
Cloud backup data is stored on Supabase infrastructure (AWS) with encryption at rest and encryption in transit (TLS/HTTPS).
License and credit data is stored on Supabase with license keys hashed (not stored in plain text).
Transactional emails (license keys, refund confirmations) are sent via Resend's infrastructure. Resend retains delivery logs for their own operational purposes. App notifications are sent directly from your machine via your own SMTP credentials and do not pass through CronSpire or any third-party service.
Payment data is handled entirely by Lemon Squeezy. We never receive or store card details.
We use HTTPS for all data transmission between your device and our services.
We use the following third-party services, each with their own privacy policy:
We recommend reviewing these providers' privacy policies if you have specific concerns.
To be explicit: we do not sell your personal or business data to anyone; we do not share your data with advertisers; we do not use your business data (projects, deals, time entries, quotes) for any purpose other than providing the service you requested; we do not place tracking pixels, advertising cookies, or third-party marketing scripts on our products; we do not train AI models on your data; and we do not access your cloud backup data for any reason other than providing the backup/restore service.
If you are in the UK or EU, you have the following rights under GDPR and the UK Data Protection Act 2018:
To exercise these rights, contact us at hello@cronspire.com. We will respond within 30 days.
We use one functional cookie (cronspire_consent) to remember your cookie preference. If you consent, we load Google Analytics which sets its own cookies for anonymised usage analytics. If you reject, no analytics cookies are set. We do not use advertising cookies, social media tracking pixels, or any other third-party marketing cookies.
Flowboard uses browser localStorage to store your application data (projects, deals, settings, etc.) and preferences. localStorage is device-local storage — it is not a cookie and data stored in it is not transmitted to any server unless you explicitly enable cloud backup. Flowboard does not set any cookies and does not load Google Analytics or any other analytics within the app.
Some of our third-party service providers (Supabase, Anthropic, Resend, Google) may process data outside the UK/EU. Where this occurs, these providers maintain appropriate safeguards for international data transfer as required by GDPR, including Standard Contractual Clauses or equivalent mechanisms.
CronSpire products are not directed at children under 16. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
We may update this policy from time to time. Material changes will be communicated via email or our website. The "last updated" date at the top indicates the latest revision. We encourage you to review this page periodically.
For privacy-related questions, data subject requests, or to exercise your data rights, contact us at:
CronSpire, Birmingham, England, United Kingdom.
CronSpire is the data controller for personal data processed in connection with our products and services.