Privacy Policy
Last updated: 11/04/2026
1. Introduction
This Privacy Policy explains how CyberrealityX Ltd (“CRXAI”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you use our platform, including:
- CRXAI web application (crxai.app)
- Desktop applications
- Plugins (e.g. Revit, SketchUp)
- Any related services (the “Service”)
We are committed to protecting your privacy and handling your data transparently in accordance with UK GDPR and other applicable laws.
Data Controller:
CyberrealityX Ltd
[Registered Address]
Email: [email protected]
2. What Data We Collect
We may collect and process the following types of data:
2.1 Account Information
- Name
- Email address
- Password (encrypted)
- Organisation/university (if applicable)
2.2 User Content (Important)
- Prompts (text inputs)
- Uploaded images, models, or files
- AI-generated images and outputs
2.3 Usage Data
- IP address
- Device and browser type
- Session activity and interactions
- Feature usage and logs
2.4 Payment Information
- Processed securely via third-party providers (e.g. Stripe)
- We do not store full payment details
2.5 Cookies & Analytics
- Session cookies
- Authentication cookies
- Analytics tools (e.g. PostHog or similar)
3. How We Use Your Data
We use your data to:
- Provide and operate the Service
- Generate AI outputs
- Manage your account and subscriptions
- Improve performance, usability, and features
- Monitor usage and prevent abuse
- Communicate with you (support, updates, billing)
4. AI Processing, Training & Content Use (Key Section)
CRXAI uses artificial intelligence systems to generate and process content. How your data is used depends on your plan:
4.1 Free Plan Users
If you are using a Free plan, you acknowledge that:
- Your Inputs (prompts, uploads) and Outputs (generated images) may be:
- Used to improve CRXAI’s AI models
- Used for testing, research, and development
- Displayed publicly in the CRXAI Explore gallery
- Your content may be:
- Visible to other users
- Used for showcasing and product features
⚠️ Important:
You should not upload confidential, sensitive, or commercially restricted content when using the Free plan.
4.2 Paid & Educational Plans
If you are using a paid or educational plan:
- Your Inputs and Outputs are treated as private by default
- We do not use your content for:
- AI training
- Public galleries
- Marketing
👉 Unless:
- You explicitly give consent
- Or it is required for:
- Service delivery
- Security
- Legal compliance
5. Public Explore Gallery
CRXAI may feature selected content in the Explore gallery:
- Applies primarily to Free plan users
- Content may be:
- Displayed publicly
- Shared within the platform
We may:
- Remove content at our discretion
- Moderate content for safety and quality
You may request the removal of your content by contacting us.
6. Lawful Basis for Processing
We process your data under the following legal bases:
- Contractual necessity – to provide the Service
- Legitimate interests – to improve and secure the platform
- Consent – where required (e.g. marketing, optional features)
- Legal obligation – where required by law
7. Sharing Your Data
We may share your data with:
Service Providers
- Hosting (e.g. cloud infrastructure)
- Payment processors (e.g. Stripe)
- Analytics providers
Legal & Compliance
- Regulators, courts, or authorities, when required
We do not sell your personal data.
8. Data Retention
We retain your data only as long as necessary:
- Account data → while your account is active
- Usage data → for analytics and security
- Free plan content → may be retained for AI training and improvement
Some data may be retained:
- To comply with legal obligations
- For dispute resolution or security
9. International Data Transfers
Your data may be processed outside the UK/EEA.
Where this occurs, we use safeguards such as:
- Standard Contractual Clauses (SCCs)
- UK International Data Transfer Agreement
10. Security
We implement appropriate technical and organisational measures to protect your data.
However:
- No system is 100% secure
- You use the Service at your own risk
11. Your Rights
Under UK GDPR, you have the right to:
- Access your data
- Correct inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent (where applicable)
To exercise your rights, contact:
📧[email protected]
You also have the right to complain to the Information Commissioner’s Office
12. Cookies
We use cookies to:
- Maintain sessions
- Improve user experience
- Analyse usage
You can control cookies through your browser settings.
13. Children’s Privacy
CRXAI is not intended for users under 18.
We do not knowingly collect data from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time.
We will notify users via:
- Website updates
- In-app notices
- Email (where appropriate)
15. Contact Us
If you have questions about this Privacy Policy:
