Privacy policy

How we handle information.

Last updated: August 4, 2026

OverviewWhat this policy covers

MyCRA LLC (“MyCRA,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information entrusted to us.

MyCRA is the company. Erised and Margin Wizardare its software, and it also provides consulting services. Where this policy says “we” or “MyCRA” it means the company — who holds information and who you contract with. Where it names a product, it means that software specifically.

This policy explains how we handle personal information when you:

• —Visit this website;
• —Ask us about our software or services, or arrange a demonstration;
• —Use our software or engage us as a customer; or
• —Otherwise interact with us.

The short version: with Erised, your data stays yours. Erised connects the database you already have to the AI model you already use. Your data moves between systems you control. We do not receive it, we do not store it, and we do not keep copies of the reporting it produces.

The only personal information MyCRA collects is what you send us directly — an enquiry, an account, an invoice. That is what most of this policy is about.

MyCRA is not a consumer reporting agency. Our customers are background screening companies. We do not compile consumer reports, we do not sell data, and we do not make or influence decisions about any individual. Where a customer is a Consumer Reporting Agency regulated by the Fair Credit Reporting Act (“FCRA”), that customer keeps its own obligations under the Act.

By using this website or our services, you acknowledge this policy.

01Information we collect

Information you provide

If you contact us or arrange a demonstration:

• —Name
• —Company name
• —Job title
• —Email address
• —Phone number, if you give it to us
• —The contents of your correspondence with us

If you become a customer, we also collect:

• —Account and billing contact details
• —Billing information
• —Account credentials
• —Support requests and related correspondence

This is the whole of the personal information MyCRA collects.

Erised: information we do not collect

This is the part that matters most to a screening company, so it is worth stating plainly. When you use Erised, MyCRA does not collect, receive, or store:

• —The contents of your database
• —Information about the people you screen
• —The questions your team asks of your data
• —The reports and dashboards your team produces

Your data is read where it already lives and goes to the model you have chosen. There is no MyCRA copy of it.

Margin Wizard: cost information

Margin Wizard works differently, and the difference matters enough to state on its own. Gross profit cannot be calculated without knowing what the work costs, so Margin Wizard stores cost information about your business — what your vendors and your services cost you. That information is held by MyCRA.

The statement above about Erised does not extend to Margin Wizard. Where this policy describes data we do not hold, it is describing Erised.

Information collected automatically

This website sets no cookies, runs no analytics, and carries no advertising or third-party tracking. Our hosting provider may keep standard server logs — which can include IP address, browser type, and pages requested — for security and reliability.

02How we use information

We use the information in section 01 to:

• —Respond to enquiries and arrange demonstrations
• —Provide, operate, and support our software
• —Bill for our services
• —Keep our own systems secure and investigate misuse
• —Improve our product
• —Comply with legal obligations and enforce our agreements
• —Maintain business records

Because we do not receive the data in your database, we cannot and do not use it to train models, to benchmark, or to build anything for anyone else.

We send marketing communications only where permitted by law, and you may opt out at any time.

03How we share and disclose information

We do not sell personal information.

To service providers

We use a small number of providers to run our business — for example hosting and email. They may access the information in section 01 only as needed to do work for us, and are contractually required to protect it.

The contact form on this website is delivered by Web3Forms, which receives the name, work email, and company you enter and passes them to us by email. If you would rather not use the form, email us directly using the address in section 12.

Legal requirements

We may disclose personal information where required by law, or where reasonably necessary to comply with legal process, respond to lawful government requests, protect the rights, property, or safety of MyCRA or others, or prevent fraud or illegal activity.

Business transactions

If MyCRA is involved in a merger, acquisition, financing, or sale of assets, personal information may transfer as part of that transaction, subject to applicable legal protections.

04Your data and your AI provider

Erised does not supply the AI model. The model is the one you choose and connect, under your own agreement with whoever provides it.

What that provider does with the information you send it is governed by your agreement with them, not by this policy. We are not a party to it. We would encourage you to read it closely — it, rather than this document, determines how data leaving your database is handled.

05If you have been screened by one of our customers

If your information appears in a background screening company’s records and that company uses Erised, we do not hold your information. We do not receive it, and we have no file on you to produce, correct, or delete.

Please contact the screening company that ran your check. Your rights under the Fair Credit Reporting Act — including the right to a copy of your file and the right to dispute inaccurate information — are exercised with that company, not with MyCRA. If you contact us, we will tell you who to approach where we can.

06Data retention and deletion

We keep the information in section 01 only as long as we need it to provide our services, meet contractual obligations, comply with law, resolve disputes, and enforce our agreements.

With Erised there is no customer data to retain. Nothing from your database is stored by us, so there is nothing for us to return or delete when our relationship ends.

Margin Wizard is different. The cost information described in section 01 is retained for as long as you use the product, and is deleted when it is no longer needed for the purposes set out in this policy.

When information is no longer needed we delete or destroy it using commercially reasonable methods designed to prevent unauthorised recovery.

07Data security

With Erised our strongest safeguard is structural rather than technical: we do not hold your data, so there is no copy of it in our possession to lose. That is not true of Margin Wizard, which stores the cost information described in section 01.

Beyond that:

• —Encryption of data in transit
• —Read-only access to your database, so the software cannot alter your data
• —Access to our own systems limited to personnel who need it

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

08Your privacy rights

Depending on where you live, you may have rights over the personal information we hold about you — which is the information described in section 01. Those rights may include:

• —Access to your personal information
• —Correction of inaccurate information
• —Deletion of eligible personal information
• —Data portability
• —Objection to certain processing
• —Withdrawal of consent where applicable

Residents of certain states, including California, Colorado, Virginia, Connecticut, Oregon, and Texas, may have additional rights under state privacy law.

Because we hold nothing from customer databases, requests about that information cannot be answered by us and should go to the screening company concerned — see section 05.

09Cookies and tracking technologies

This website does not use cookies, analytics, or advertising trackers. If that changes, we will update this policy and, where required, ask for your consent first.

10International data transfers

We do not move the data in your database anywhere. It goes where you direct it.

The business information described in section 01 is stored and processed in the United States.

11Changes to this policy

We may update this policy from time to time. When we make material changes we will revise the “Last updated” date above and, where required by law, give additional notice. Continuing to use this website or our services after changes take effect means you accept the revised policy.

12Contact us

If you have questions about this policy or our privacy practices, please contact us.