Privacy Policy
Effective April 28, 2026
1. Who we are
CrusaderBase is operated by Not Beer Inc.("we", "us"). We provide AI agents that help consumer-packaged-goods brands run operational workflows — including creator and influencer sample programs that integrate with Instagram.
2. Information we collect
We collect information from three sources:
- Account information. Name and email address you provide when creating an account, supplied through our identity provider (Clerk).
- Brand configuration. Product catalog, brand voice, message templates, warehouse and 3PL configuration, and approval-policy settings you enter when configuring an agent.
- Instagram data (with your consent).When you connect an Instagram Business or Creator account, we access: messages in conversations involving that account, public profile fields of accounts you message, mentions of your account, and media you choose to track. We use the Instagram Graph API and comply with Meta's Platform Terms.
3. How we use information
- To operate the agents you have enabled — for example, reading inbound DMs to extract shipping addresses, queueing shipments for your approval, sending tracking updates and follow-ups.
- To submit shipments and tracking requests to your configured 3PL partners on your behalf.
- To produce dashboards, audit logs, and inspector traces so you can review what the agent has done and why.
- To monitor service health, prevent abuse, and meet legal obligations.
We do not sell personal information. We do not use your Instagram data, message content, or creator data to train machine-learning models for any party other than you.
4. How we share information
We share information only with service providers necessary to deliver the service, under contracts that limit their use of your data:
- Clerk — identity and session management.
- Supabase (Postgres, file storage, realtime) — primary data store, hosted in the United States.
- Amazon Web Services — application hosting, secrets management, file storage.
- Vercel — frontend hosting and edge delivery.
- Meta Platforms — Instagram Graph API used to read and send messages on your authorized account.
- Your configured 3PLs (e.g. UNIS, ShipStation) — shipment data necessary to fulfill orders you have approved.
We may disclose information when required by law, to protect our rights, or in connection with a corporate transaction (subject to equivalent privacy protections).
5. Data retention and deletion
We retain operational data for as long as your account is active and as needed to provide the service. Audit logs and inspector traces are retained for a minimum of 12 months to support compliance and dispute resolution.
You may request deletion of your data at any time by emailing dillon@enjoynotbeer.com. Instagram users whose data we hold (for example, creators who have messaged your connected account) may request removal through the same address or through Meta's data-deletion callback mechanism, which is implemented at /api/data-deletion.
6. Security
We use TLS for data in transit, encryption at rest for stored data, role-based access control for our staff, and AWS Secrets Manager for credential storage with rotation. We are building toward SOC 2 Type II readiness and will pursue formal audit when our customer base requires it.
7. Your rights
Depending on your jurisdiction (including the EU/UK under GDPR and California under CCPA/CPRA) you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. To exercise any of these rights, contact dillon@enjoynotbeer.com.
8. Children
CrusaderBase is not directed to children under 16 and we do not knowingly collect personal information from them. The service is intended for use by businesses.
9. Changes
We may update this policy. Material changes will be communicated by email or in-app notice. Continued use after the effective date of an update constitutes acceptance.
10. Contact
Questions about this policy or your data: dillon@enjoynotbeer.com.