Privacy policy

Crossroad — web app and Chrome extension · Last updated: 10 October 2026

Crossroad is a tool for capturing product insights (text you select, screenshots you draw a box) into a workspace you own or were invited to, and asking questions across them. This policy describes what data the tool handles and where it goes. The guiding principle: nothing is collected beyond what you deliberately capture, and it goes only to Crossroad and the providers listed below.

Data you actively capture

Selected text you choose to save (via right-click, shortcut, or the popup).
Screenshots of a region you explicitly drag-select (Cmd/Ctrl+Shift+E), stored for provenance and transcribed to text.
Page context attached to a capture: URL, page title, and — when the page exposes them — author, publish date, language, site name, and the nearest section heading.
Emails you forward to your workspace's private capture address (subject and body), plus any attached images or PDFs: attachments are transcribed to text and the files are then deleted from our servers — only the extracted text and the attachment's filename are kept. Everything arriving by email waits in a review inbox until a workspace member approves it.

The extension reads a page only when you trigger a capture on it. It does not track browsing, does not read pages in the background, and captures nothing without a deliberate action (clipboard-based captures always show a confirmation dialog first).

Data the app stores as you use it

Your Ask conversations are saved so you can pick one up again: the questions you ask and the answers you get back. They stay private to you, and other members of the workspace cannot see them. You can delete any conversation from the Ask page at any time.
Workspace activity (who captured, edited or deleted what) is visible to the members of that workspace.
Feedback you send us from the in-app form goes to the founder's inbox by email, together with your email address and the workspace name, so we can reply to you. It is delivered through Resend and is not stored in the app.
Shared answers. When you share an answer, we keep a copy of it that anyone with the link can read: the question, the answer and the quotes it cites, with your name and the workspace name (the page shows your first name only). Turning the link off erases the copy. Deleting a source or insight that the answer quotes turns the link off too, and so does deleting your account.

Account data

You sign in with Google, with a link we email you, or with a password. We store your name and email address, and your profile picture if you use Google. A password is never stored as you typed it: we keep only a salted one-way hash (scrypt), which can check a password but not reveal it. Sessions, refresh tokens and emailed sign-in links are stored only as hashes.

Where your data lives

For the hosted service at joincrossroad.com, Crossroad operates the backend on European infrastructure (a server in Germany), reached through Cloudflare. Data is isolated per workspace — only members of a workspace can see its data. Deleted material goes to a 30-day trash, after which it is permanently removed and its stored files (screenshots) are erased from disk. Backups are encrypted before they leave the server and stored off-site in the EU (Cloudflare R2). Older backups are deleted on a rolling cycle, so something you delete can remain in an encrypted backup until that backup is deleted. The software can also be self-hosted, in which case your own operator — not Crossroad — hosts and controls the data.

Subprocessors

The hosted service relies on these providers to operate. Captured content goes to the AI providers, only to deliver the features you use, and summaries of it go out in the weekly digest email:

Anthropic (Claude) — extracts insights from captured text and transcribes captured screenshots. Receives the captured content.
Voyage AI — computes text embeddings for search. Receives the captured text.
Hetzner (Germany) — hosts the backend server and stored data.
Cloudflare: DNS, TLS and the network layer in front of the service, and storage for our encrypted backups (R2, in the EU).
Resend sends our email: sign-in links, workspace invites, the weekly digest and other notices. It receives each recipient's email address and name and the content of the email. For the weekly digest that includes short summaries of your workspace's new insights and the accounts they mention.
Cloudflare Web Analytics (marketing website only): cookieless page-view counts, no identifier stored in your browser, aggregate numbers only.

These providers process content to provide the service; they are not sent your browsing activity, and captured data is not used to train the AI models under the API terms in effect.

What we don't do

No selling or sharing of data with data brokers or advertisers, and no third-party advertising trackers. The browser extension runs no analytics at all.
No collection of browsing history, keystrokes, or page content you didn't capture.
No use of captured data for purposes unrelated to the tool's single purpose (capturing and querying your insights).

Chrome permissions, briefly

contextMenus / activeTab / scripting — the right-click menu, and reading your selection or showing the overlay for drawing a box on the tab where you trigger a capture.
clipboardRead — only as a fallback in canvas editors (e.g. Google Docs), and always behind a confirmation dialog.
storage / identity — your sign-in tokens, kept locally in the browser.
Host access — to app.joincrossroad.com only. The extension is locked to that backend; there is no setting that points it anywhere else.

Your controls

Download your data (a JSON export of your account, every workspace you can see, and your Ask conversations) and delete your account at any time from Workspace → Your data. Deleting your account permanently removes any workspace you solely own, including all captured content and stored files, and erases your Ask conversations everywhere else. It also erases your sign-in methods (your password hash and your link to Google), your sessions and any unused sign-in links, turns off the answers you shared and erases their copies, and removes your activity and the emails we sent you from our own records. What you added to a workspace you share with others stays in that workspace as part of its records, including its activity log. We keep a short internal record of the deletion, with your name, email address and the date, so that our cost records still show whose usage they were. It is used for nothing else.
Edit or delete any source or insight in the app; admins can restore from trash for 30 days, after which it is permanently erased from disk.
Leave a workspace at any time; removing a member immediately ends their access.
Sign out to revoke the extension's tokens server-side.
Workspace activity is visible to its members (who captured/edited/deleted what).

Data processing

When you use Crossroad for business, captured content may contain other people's personal data. In that case you are the data controller and Crossroad is your processor — see the Data Processing Addendum for the sub-processor list, security measures, and how we handle data-subject requests.

Cookies and analytics

The web app uses two strictly necessary cookies (to keep you signed in, and to mark a guest visit to the public demo) and no analytics cookies. The marketing website counts visits with Cloudflare Web Analytics, which sets no cookies and stores no identifier. To understand how Crossroad is used we look at our own records of what happens inside a workspace (captures, questions, sign-ins, whether our emails were delivered), which we hold as the processor of that data and never share with an analytics vendor. Our record of each email we sent holds the recipient's address and is deleted after 90 days. Every cookie is listed in our Cookie policy.

Contact

Questions, or any privacy request you can't complete in the app: [email protected]. We respond to access, correction, and erasure requests within 30 days.