Privacy Policy

This Privacy Policy describes how SoraWebs, Inc. ("we", "us", or "our") collects, uses, shares, and protects your personal information when you use our website (https://www.croisa.com) and our website creation services (collectively, the "Service").

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Our Data Controller is SoraWebs, Inc. located at 1207 Delaware Ave #4484, Wilmington, DE 19806. You can contact us regarding privacy matters at privacy@croisa.com.

We collect information about you directly from you, automatically through your use of our Service, and sometimes from third parties.

Information You Provide Us

• Account Information: When you register, we collect your name, email address, password, and potentially payment information.
• Business Information: To create your website, you provide details like your business name, address, phone number, services, opening hours, photos, and other content ("User Content").
• Communications: If you contact us directly (e.g., for support), we may receive additional information like the contents of your message and contact details.

Information Collected Automatically

• Usage Data: We collect information about how you interact with the Service, such as features used, pages visited, time spent, IP address, browser type, device information, and referring URLs.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to operate and personalize the Service. Please see our Cookie Policy for more details.
Cookies

We use the information we collect for various purposes, including to:

• Provide, operate, maintain, and improve the Service.
• Generate and personalize your website content, including AI-generated text and translations.
• Process your payments and manage your subscription.
• Communicate with you, including responding to inquiries and sending service-related announcements.
• Analyze usage trends to improve user experience and develop new features.
• Prevent fraud, enforce our Terms of Service, and comply with legal obligations.

If you are in the European Economic Area (EEA) or the UK, our legal basis for collecting and using the personal information described above will depend on the information concerned and the specific context.

We normally collect personal information from you only:

• Where we need the personal information to perform a contract with you (e.g., to provide the Service you subscribed to).
• Where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for analytics, improving our Service, fraud prevention).
• Where we have your consent to do so (e.g., for certain types of marketing communications or specific uses of AI data).

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time.

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors and partners who perform services strictly on our behalf and under our instruction. These include services such as:
  • Cloud hosting and infrastructure (AWS,Vercel)
  • Payment processing (Stripe)
  • AI model providers (OpenAI,Anthropic)
  • Analytics providers (Google Analytics,Microsoft Clarity)
  • Domain registration and customer support

  These providers only have access to the information necessary to perform their functions and are contractually obligated to protect your information and process it only for the purposes we specify.

• Google Maps Platform: This website uses Google Maps Platform services, including the Places API, to provide features like business search and location details. Your use of these mapping features is subject to theGoogle Maps Platform Terms of Serviceand theGoogle Privacy Policy, which are incorporated herein by reference.
• Legal Compliance: If required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of SoraWebs, Inc., our users, or others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share information with third parties when we have your explicit consent to do so.

Your information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.

Specifically, our servers and infrastructure are primarily hosted in the United States via services like AWS and Vercel. Our third-party service providers (including Stripe, OpenAI, Anthropic, and Google) also operate globally, which may involve transferring data to the United States and other countries. Where we transfer your information internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable law (e.g., by relying on adequacy decisions, using Standard Contractual Clauses, or verifying provider certifications like the EU-U.S. Data Privacy Framework).

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (e.g., to provide you with the Service, to comply with legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (e.g., because your information has been stored in backup archives), then we will securely store your information and isolate it from any further processing until deletion is possible.

If you are a resident of the EEA or UK, you have the following data protection rights:

• Right to Access, Correct, Update, or Request Deletion: You can manage your account information through your dashboard or contact us to exercise these rights.
• Right to Object to Processing: You can object to processing based on legitimate interests.
• Right to Restrict Processing: You can ask us to restrict processing in certain circumstances.
• Right to Data Portability: You can request a copy of your information in a machine-readable format.
• Right to Withdraw Consent: If we process based on consent, you can withdraw it at any time.
• Right to Complain: You have the right to complain to a data protection authority.

To exercise these rights, please contact us at privacy@croisa.com. We respond to all requests in accordance with applicable data protection laws.

For users in the European Union, our Data Protection Officer can be contacted at privacy@croisa.com.

We implement appropriate technical and organizational measures to protect the personal information we collect and process. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Our Service is not intended for individuals under the age of 18 (or the relevant age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on the Service and updating the "Last Updated" date. We encourage you to review this policy periodically.

We may use automated systems including artificial intelligence for content generation, personalization, and improving our services. In most cases, these processes do not produce legal effects or similarly significant effects on you.

Where automated processes are used to make decisions that would have a significant impact on you, we will ensure that:

• Such processing is necessary for entering into or performing a contract between you and us, or is based on your explicit consent;
• You have the right to obtain human intervention, to express your point of view, and to contest the decision.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

SoraWebs, Inc.
1207 Delaware Ave #4484, Wilmington, DE 19806
Attn: Privacy Officer
privacy@croisa.com