PRIVACY POLICY

STARECROW ("the App") is an Open Source Intelligence (OSINT) investigation platform operated by Librus System Software. This policy explains what data the App collects, how it is used, and the controls you have over it.

To provide investigation features, the App stores data you create or supply, scoped to your account: (a) your email address and account role; (b) case files and case entries (investigation notes and module results); (c) proxy configuration profiles; (d) API keys you voluntarily add for third-party OSINT services. All records are tied to your account via row-level security and are not shared with other users.

The App does not access your device contacts, camera, microphone, location, SMS, or photo library. We do not sell your data to third parties. We do not maintain advertising profiles.

Stored data is used solely to operate the App: to run OSINT modules, save investigation results, manage your proxy and API-key preferences, authenticate your session, and send transactional emails (such as account-deletion confirmations).

The App queries public OSINT data sources and APIs (e.g., Shodan, AlienVault OTX, crt.sh, OpenStreetMap, breach-notification services) and uses an AI language model to synthesize intelligence reports. These requests are made to provide the features you request. Data sent to third parties is limited to the target identifier you submit (e.g., a domain, username, or URL). Each third party is governed by its own privacy policy.

Data is stored on a secured backend with row-level access controls so only your account can read or modify your records. Authentication tokens are managed by the platform. We recommend you use a proxy and avoid storing high-privilege credentials in the API-Key manager unless required.

Your data is retained for as long as your account is active. You may permanently delete all your data — case files, case entries, proxy configurations, and API keys — at any time from Settings → Account Management → Delete Account. Deletion is irreversible and cannot be recovered. Removing the App from your device does not delete server-side data; use the in-App deletion flow.

The App is provided for lawful investigation, security research, and authorized due-diligence only. You are responsible for ensuring your use complies with applicable laws and the rights of data subjects. Librus System Software is not responsible for misuse.

The App is not directed to children under 18 and must not be used by anyone under 18.

We may update this policy as the App evolves. Material changes will be reflected here with an updated effective date.

For privacy questions or data requests, contact Librus System Software through the support channel provided with your subscription.