Topo · The Crux Innovation, LLC
Version 1.3 · Effective August 15, 2026
This Privacy Policy applies to your use of Topo during its private beta. It explains what The Crux Innovation, LLC ("THE CRUX") collects when you use Topo, why, and what choices you have. Your use of Topo is also governed by our Terms of Service.
We process your personal information to create and secure your account, provide and maintain Topo, communicate with you, protect the service's security, and comply with applicable laws. Where required by applicable law, we process your information based on your consent, to provide the services you request, to comply with legal obligations, to resolve disputes, or for our legitimate business interests in operating Topo and maintaining its security. If you separately opt in, we may also send you marketing communications, which you can withdraw at any time without affecting your use of Topo.
We do not use the content you submit to Topo to train Topo or any third-party AI model. Our AI providers process your content to generate Topo's responses. Under our agreements with them, they do not use it to train their models. They may retain it briefly for security and abuse monitoring, as their terms describe.
We collect your email address to sign you in; your name, if you choose to give it, which we use to greet you and label your account in Topo's interface; the content you create in Topo, including your inputs, the product or company you're developing, and your project material; files you attach (such as documents, spreadsheets, presentations, and images), including text we extract from them so Topo can read and reference them in your sessions; and basic usage information needed to run and secure the service. If you use voice input, your dictated audio is sent to our transcription provider, converted to text, and not stored — the audio exists only for the duration of transcription. We collect this information when you sign in and as you use Topo. Topo isn't intended for children under 16, and we don't knowingly collect their personal information. We also use cookies and similar technologies to keep you signed in, maintain security, and operate Topo.
We keep your information for as long as we need it to operate Topo and comply with legal obligations. If you delete your account, we delete your account information, projects, conversations, and uploaded files, and automated cleanup removes any remaining stored copies within thirty (30) days. We retain limited consent and security records, including the email address associated with them, where we need them to demonstrate compliance with applicable law. When we no longer need information, we delete it or de-identify it.
To operate Topo, THE CRUX entrusts the processing of personal information to service providers, all of which are located in the United States. If you use Topo from outside the United States, this involves the cross-border transfer of your personal information to the United States. The table below identifies each provider, the work entrusted to them, the personal information involved, and how to contact them.
| Service provider | Entrusted work (purpose) | Personal information involved | Recipient contact |
|---|---|---|---|
| Anthropic | AI processing to generate Topo's responses | Your inputs and project content | privacy@anthropic.com |
| OpenAI | AI image generation for storyboard visuals (character and scene descriptions derived from your project content) and voice-input transcription (audio you choose to dictate, converted to text and not retained). | Character and scene descriptions derived from your project content; dictated audio when you use voice input (not retained) | privacy@openai.com |
| WorkOS | Account sign-in and authentication | Email address and authentication identifiers | privacy@workos.com |
| Sign-in with Google (authentication) | Email address, name, and authentication identifiers | Google Privacy Help | |
| Resend | Delivery of transactional email and of feedback you submit | Email address; your name and the content of feedback you submit | privacy@resend.com |
| Turso | Database hosting and storage | Account and project data | privacy@turso.tech |
| Vercel | Application hosting, file storage, and delivery | Personal information processed to operate and serve Topo, including files you attach | privacy@vercel.com |
| Sentry | Error monitoring and diagnostics | Technical diagnostic data, and any personal information or content incidentally contained in error reports | compliance@sentry.io |
Country of transfer: all providers listed above are located in the United States. Time and method of transfer: personal information is transmitted electronically over secured internet connections, at the time you use Topo and on an ongoing basis as necessary to provide it. Retention and use period: personal information is retained for the period described in Section 3 (How Long We Keep It), or until the entrustment ends, whichever is earlier.
These providers are essential to operating Topo. You may decline these transfers, but we would not be able to provide the service without them. By accepting this Privacy Policy, you acknowledge and consent to the entrustment and cross-border transfer of your personal information as described above.
If you sign in with Google, we receive your email address and basic profile information from Google solely to create, secure, and operate your account. We use this information only for authentication and account management, and we do not share it except as described in this Policy.
To ground its answers in current information, Topo may run web searches during a conversation using queries derived from your inputs. These searches are performed through our AI provider, Anthropic, as part of generating Topo's responses.
You can ask to see the information we hold about you, correct it, delete it, ask us to stop or restrict processing it, or withdraw your consent at any time. Depending on where you live, you may have additional rights under applicable law, including under the Republic of Korea's Personal Information Protection Act (PIPA) and Japan's Act on the Protection of Personal Information (APPI). Withdrawing consent or exercising these rights will not affect the lawfulness of any processing carried out before your request. To make a request, contact us at the address in Section 9. We will respond in accordance with applicable law.
If you use Topo in connection with an engagement between your organization and THE CRUX, material you submit may also be governed by the agreement between us and your organization — including any non-disclosure agreement. Where that agreement addresses the handling of your organization's confidential information, it controls to the extent of any conflict with this Policy. You remain responsible for submitting only material you are permitted to disclose.
We use reasonable technical and organizational measures to protect your personal information, including encryption of data in transit, access controls limiting who at THE CRUX can access it, and authentication managed by a specialist provider. We do not sell your personal information or share it for cross-context behavioral advertising.
If we become aware of a security incident affecting your personal information, we will notify you and the relevant supervisory authorities as and when required by applicable law, including PIPA and APPI.
If THE CRUX is involved in a merger, acquisition, sale of assets, or other similar business transaction, your personal information may be transferred as part of that transaction. If the transaction results in materially different privacy practices, we'll provide any notice required under applicable law.
Because THE CRUX and its service providers are based in the United States, your information may be transferred to, stored, and processed in the United States and other countries where our providers operate. Those countries may have privacy laws that differ from those in your home country.
For privacy questions or requests regarding your personal information, contact privacy@thecrux.io.
Person responsible for personal information protection:
John Watson, Founder & CEO, The Crux Innovation, LLC
We may update this Policy. When we do, we'll change the version and effective date shown on this page.
This Policy is issued in English and in translation. In the event of any inconsistency, the English version governs.