Legal

Privacy Policy

Controller identity, ChatGPT / MCP processing, retention and your rights. Technical draft aligned with Sirius Detector legal notice — not legal advice.

CRYSTALIZE™ provides digital evidence preservation / a verifiable digital record. It is not automatic legal proof and is not a substitute for counsel or court procedure.

Last updated: August 2026

1. Controller

The CRYSTALIZE™ product and Sirius Detector platform are developed and operated by Intelsirius S.r.l.

Registered office: Via di San Miniato 26, 52026 Castelfranco Piandiscò (AR), Italy
Tax ID / VAT: 02519080515 · REA AR-224865
Email: info@siriusdetector.com
PEC: intelsirius@pec.it
DPO: Orazio Lacenere

2. ChatGPT / MCP integration

When you connect CRYSTALIZE via OAuth and invoke MCP tools:

Data	Source	Purpose
Sirius account (`user_id`)	OAuth	Auth, ownership, billing
OAuth scopes	Your consent	Authorize tools
Requested URL	You / ChatGPT	Capture after confirmation
Job metadata (status, hash, warnings)	System	Operation / UI
Evidence package (internal)	Engine	Your record — not returned raw to the model
Audit events	System	Security (no secrets)
Chat prompts	ChatGPT	OpenAI conversation policy

3. What is not sent to the model

Raw page HTML
Filesystem / bucket paths
Secrets, API keys, stack traces
Reusable confirmation tokens in widgets

Access, rectification, erasure and portability according to the Sirius platform policy. You may revoke OAuth access and cancel captures where allowed. Contact the controller using the details above.

5. Retention

Account and capture retention follow your plan and platform policy. Staging / review jobs may use shorter retention. Security logs are kept as required for audit and abuse prevention.

6. Subprocessors (indicative)

Hosting infrastructure for Sirius / CRYSTALIZE
OpenAI (ChatGPT conversation / tools)
Timestamp / signing providers when enabled (e.g. TSA)
Payment providers when billing is active

7. Cookies

See the dedicated Cookie Policy.