Privacy Policy

Effective Date: October 3, 2025

Last Updated: October 3, 2025

1. Introduction

Crosstabs Pty Ltd ("we," "our," or "us") operates crosstabs.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered statistical analysis service.

Key Principles:

• ✅ We DO NOT store your uploaded data files
• ✅ We DO NOT require user accounts or personal information
• ✅ We DO NOT sell or share your data with third parties
• ✅ Analysis results are cached anonymously for 24 hours only
• ✅ No email collection, no user profiles, no invasive tracking

2. Information We Collect

2.1 Uploaded Data Files

Processing Only: When you upload a CSV or Excel file:

• Your file is processed in server memory for analysis
• The file is NEVER written to disk
• The file is immediately deleted from memory after analysis completes (typically 2-10 seconds)
• We retain NO COPY of your raw data

2.2 Analysis Results

Temporary Caching: Analysis results (insights, statistics, charts) are:

• Stored anonymously in Redis cache for 24 hours
• Used to enable fast sharing via URLs (e.g., crosstabs.com/share/abc123)
• Automatically deleted after 24 hours
• If you share your results, they may be stored for up to 12 months to enable viral sharing

2.3 Analytics & Usage Data

We collect minimal, aggregated usage data via Google Analytics to improve our service:

• Page views and navigation patterns
• Device type, browser, screen resolution
• Country/region (not precise location)
• Time spent on site
• Anonymized IP addresses (last octet removed)

No Personal Identifiers: We do not collect names, emails, phone numbers, or precise location data.

2.4 Cookies

We use minimal cookies:

• Google Analytics: _ga, _gid (performance tracking)
• Google AdSense: Advertising cookies (if you view ads)
• Session: Temporary session ID for result caching

You can disable cookies in your browser settings. The Service will still function.

3. Third-Party Services

3.1 OpenAI (GPT-4)

AI Analysis Provider: We use OpenAI's GPT-4 API to generate statistical insights. When you upload data:

• Statistical summaries (not raw data) are sent to OpenAI's API
• OpenAI processes this data according to their Privacy Policy
• OpenAI does NOT use API data to train their models (as of their Enterprise API terms)
• We send only aggregated statistics, never raw individual records

Your Data Protection: We minimize what we send to OpenAI. For example, instead of sending 10,000 survey responses, we send: "Gender: Male=45%, Female=55%; Age: 18-25=30%, 26-35=40%..."

3.2 Google Analytics

We use Google Analytics to understand how users interact with our Service. Google may use this data as described in their Privacy Policy.

3.3 Google AdSense

We display ads via Google AdSense. Google may use cookies to serve personalized ads. You can opt out at adssettings.google.com.

4. Data Retention

5. Data Security

We implement industry-standard security measures:

• HTTPS Encryption: All data transmitted over secure SSL/TLS connections
• No Disk Storage: Uploaded files are never written to disk
• Memory-Only Processing: Files processed in RAM and immediately garbage-collected
• Regular Security Audits: We review our infrastructure quarterly
• Limited Access: Only authorized personnel can access our servers

No Security is Perfect: While we use best practices, no method of transmission over the Internet is 100% secure. Use the Service at your own risk (see our Terms of Service).

6. Your Rights (GDPR & Privacy Act)

If you are in the EU, UK, or Australia, you have the right to:

• Access: Request a copy of your data (we likely have none, as we don't store personal data)
• Deletion: Request deletion of your data (analysis results auto-delete in 24 hours)
• Correction: Request correction of inaccurate data
• Portability: Export your analysis results (use our export feature)
• Objection: Object to processing (simply don't use the Service)

To exercise these rights, email privacy@crosstabs.com.

7. Children's Privacy

The Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us with data, contact privacy@crosstabs.com.

8. International Data Transfers

We are based in Australia. Your data may be processed in:

• Australia: Our primary servers
• United States: OpenAI's servers (for GPT-4 API)
• Europe: Google's servers (for Analytics/AdSense)

By using the Service, you consent to these transfers. OpenAI and Google comply with GDPR via Standard Contractual Clauses.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the new policy.

10. Do Not Sell My Personal Information (CCPA)

California Residents: We do NOT sell your personal information. We do NOT share it with third parties for their marketing purposes. You have the right to opt out of data sales, but since we don't sell data, no action is needed.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights:

Crosstabs Pty Ltd • ABN 59 691 163 327 • ACN 691 163 327
Made in Australia 🇦🇺 🦘 🐨 with love ❤️

← Back to Crosstabs.com