Privacy

• Every connection is read-only. The one thing we ever send to a connected service is a review reply you approved; we never change anything else in your Stripe, App Store Connect, Google Play or analytics accounts.
• Credentials you give us are encrypted at rest and never shown back to you or written to logs.
• We don’t sell your data, rent it, or use it for ads.
• Your numbers are private until you make them public, product by product and metric by metric.
• Delete your account from Settings and everything is gone within 24 hours.

Your account. Your email address, and your name and avatar if you sign in with GitHub. We use them to sign you in and to send the brief and alerts you ask for.

Connection credentials. The read-only keys and tokens you paste or authorize for Stripe, RevenueCat, App Store Connect, Google Play, Search Console, Plausible, Vercel and PageWarden. They are encrypted with AES-256-GCM using a key kept separate for each environment, and are only decrypted on our servers at the moment StatCrow calls that service for you.

Synced data. The metrics those services report (revenue, subscriptions, downloads, ratings, traffic, search clicks, uptime), the reviews people leave on your apps, and events like app versions and deploys. This data comes only from the connected service. It is never typed in by you or by us.

What you type. Workspace settings, your voice sample, product facts, hours you self-report, notes and your public profile.

Waitlist. If you join the waitlist we keep your email so we can send one invite.

Every provider is connected with the narrowest read-only scope it offers. The only thing StatCrow ever sends to a connected service is a review reply, and only after you tap send on that reply. You can revoke any key at the provider at any time; StatCrow marks the connection as broken and stops syncing.

We use Anthropic’s API to write the Daily Brief, to tag reviews with themes and to draft review replies. We send the minimum it needs:

• For the brief, the findings StatCrow already computed (for example, “trial conversion fell from 26% to 18% after v2.3”) and product names.
• For a reply draft, the review text, its rating, your voice sample and the product facts you saved.
• For review themes, each synced review’s title, text and rating, with no reviewer name, and your list of themes.

We never send credentials, raw exports from your accounts, or your email address.

Nothing is public until you make it public. On your verified page you choose which products and metrics appear and at what precision: exact, a range, growth only, or hidden. Hidden metrics, focus calls, self-reported hours, reviews and credentials are never served on public pages.

Once a day we sign a snapshot of what your verified page shows, so other people can check a number without trusting the page. We keep these snapshots until you delete your account.

We use Plausible on public pages only, such as verified pages, to count visits. Plausible doesn’t use cookies or follow people across sites. Signed-in pages load no third-party scripts at all.

We set one cookie to keep you signed in. Your light or dark theme choice is stored in your browser, not on our servers.

• Vercel hosts the app.
• Neon hosts the database.
• Resend sends email.
• Anthropic writes briefs and reply drafts, as described above.
• Stripe handles payments for Pro. We never see your card number.
• Plausible counts visits to public pages.
• GitHub, if you choose to sign in with it.

We share data with these services only to run StatCrow, and with authorities only when the law requires it.

Delete your account from Settings. Within 24 hours we delete your workspace, every connection and its encrypted credentials, synced metrics, reviews, briefs, alerts, Stat Cards, your verified page and every signed snapshot of it. If you have no other workspace, your sign-in goes too. A Pro subscription is canceled with the account.

Your handle is held for 90 days after deletion so nobody else can claim it and pose as you. After 90 days it is released. Encrypted database backups roll off on their own within 7 days.

Email privacy@statcrow.com. See also the terms and how StatCrow verifies.