Privacy

Last updated 23 July 2026.

CrashCart is a downloadable command-line tool with a small marketing site and a customer portal. This page describes, in plain language, what data each part handles. It is a summary of our actual practices, not a substitute for legal advice.

Your AI provider key never reaches us

CrashCart is bring-your-own-key. You set your provider API key (for example CRASHCART_API_KEY) as an environment variable on your own machine. The binary reads it at runtime and sends it only to the AI provider you chose. It is never compiled into the binary, transmitted to CrashCart, stored by us, or written to our logs.

What the tool sees

The binary runs on your host and gathers local system context (things like OS, disk usage, and failed services) to help troubleshoot. That context, and anything you type, is sent to your chosen AI provider as part of your session — subject to that provider's privacy terms — and to no one else. In Active Mode, commands are run only after you confirm them, and a local audit log of proposed commands is kept on your machine.

The contact form

If you use the contact form on this site, it collects your name, work email, company, and message, and forwards them through Formspree so we can reply. We use those details only to respond to you.

Accounts and billing

The customer portal uses Clerk for sign-in and Stripe for payments; each handles the data needed for those functions. See the portal's own privacy page for details of account and billing data.

This site

The marketing site is a static site. It sets no advertising cookies and does not sell personal data.

Contact

Questions about privacy? Get in touch. See also our Terms.