Terms, privacy, refunds and security

Terms

The software

Crowe Logic is proprietary software, licensed and not sold. The crowe-logic package, the desktop and web apps, their system prompts and model configuration are covered by the Crowe Logic Proprietary Software License that ships in the package as LICENSE. That license is the agreement; this page summarizes it. You may install and run the software on machines you control for as long as you hold a plan, including the free tier. You may not redistribute it, build a competing service from it, or work around its metering.

Plans

• Free. No card and no keys, just a Crowe ID. CroweLM Flash, which runs on DeepSeek V4 Flash by DeepSeek, at twenty turns a day, with the full tool loop and autonomy levels. Frontier picks run on keys you hold.
• Pro, $99 a month. Every CroweLM tier and effort rung, dual mode and synthesis, and the desktop and web apps on the same Crowe ID.

Billing

Pro bills monthly through Stripe against the card you enter at checkout. Cancel any time: run crowe billing, which opens the Stripe customer portal, or write to us. The portal shows when access ends after a cancellation. Prices can change; a change reaches you only at your next renewal and you will be told first.

Fair use

Pro is metered in credits so a vendor rate change never reaches your invoice. If a single account's usage is far outside what an individual operator would do, we will contact you before doing anything about it.

The engines

CroweLM tiers run on named third-party language models hosted on Microsoft Azure. Their output can be wrong. You are responsible for reviewing what the console produces before you rely on it or let it act, and the autonomy levels exist so you can decide how much it may act on its own.

Law

The license is governed by the laws of the State of Arizona, United States, with jurisdiction in Maricopa County. Crowe Logic, Inc. is in Phoenix, Arizona.

Privacy

What the console keeps on your machine

• Sign-in tokens in ~/.config/crowe-logic/auth.json, written with owner-only permissions. crowe logout deletes them.
• Session state and prompt history under ~/.crowe-logic/ (or CROWE_LOGIC_HOME), so a session can be resumed. It never leaves the machine.
• A local telemetry file at ~/.crowe-logic/runtime/telemetry.jsonl: which tools ran and how long they took, which tier and provider answered, token counts, timings and session events. It does not keep your prompts, the replies or the contents of your files; tool arguments are cut to 200 characters and the values of content, text and data arguments are dropped. It is created with owner-only permissions, rotated at 50 MB, and never uploaded. CROWE_LOGIC_TELEMETRY=0 turns it off.
• On the free tier, an anonymous device token so the daily allowance can be counted without an account.

What the gateway records

To meter and bill, the gateway at api.crowelogic.com, which runs on Microsoft Azure, records, per request, the signed-in Crowe ID (your email), the tier, token counts and timestamps; on the free tier, the anonymous device token and the day's count. Those metering records are kept as billing records for as long as your account exists. The gateway does not keep the content of your messages or attachments once the answer has been returned.

Where your messages go to be answered

Your prompts and attachments are forwarded to the service that runs the model for the tier you chose, to produce the answer, and the answer streams back to you. Every tier names its engine in the model picker and on the CroweLM page. As of this revision:

• CroweLM, CroweLM Zenith, CroweLM Vision and the Claude picks (Claude Fable 5.1, Claude Opus 5, Claude Opus 4.8, Claude Sonnet 5) are processed by Anthropic's service on Microsoft Azure, under Anthropic's commercial terms. Anthropic does not use this content to train its models. Its safety systems may flag content for review by Anthropic.
• CroweLM Depth, CroweLM Coder, CroweLM Flash and the GPT, DeepSeek and Kimi picks (Grok 4.6 by xAI; GPT-5.6, GPT-5.5 and GPT-5.4 by OpenAI; DeepSeek V4 Flash and V4 Pro by DeepSeek; Kimi K3 and K2.7 by Moonshot AI) are processed by Microsoft Azure, which sells these models directly. Microsoft does not share your prompts or outputs with the model makers and does not use them to train models.
• CroweLM Mycelium is Google's open-weights Gemma 4 model, run by Crowe Logic on Modal's infrastructure. Google receives nothing.
• GLM 5.3 Flash by Z.ai is processed by Cloudflare's inference service.

Each of these providers receives your content only to produce the answer, under business terms that do not permit it to train on that content or use it for anything beyond running the service, which is the same protection this page promises. Crowe Logic does not use your conversations to train models and does not sell them.

Usage analytics

The gateway records usage events (which feature ran, when, on which plan, how many tokens) with PostHog, an analytics service, under your Crowe ID's account identifier, with your email hashed. Message content, attachments and replies are never included.

Crowe Logic for iPhone

The iPhone app is the same operator over the same gateway, so everything above applies to it. What the app itself does with your data:

• The data notice. On first launch, before sign-in and before anything can be sent, the app says what it sends and to whom and asks you to allow it. Until you do, nothing goes to the gateway or to any model service. You can take the permission back at any time in Settings under Your data, and the notice is shown again if a recipient is added.
• Messages, photos and files. What you type or dictate, the photos you take or choose, and the files you hand the app are sent to the gateway when you tap send, and from there to the service for the tier you chose, as listed above. Photos go to CroweLM Vision, which is Anthropic's service on Microsoft Azure. Photos and files are held in the app's memory for the conversation and are not uploaded anywhere else.
• Read aloud. When you ask to hear a reply, its text is sent to the gateway, which has it spoken by Microsoft Azure Speech, or by ElevenLabs when the Michael voice is on (Personal plan and above). The text is used to make the audio and for nothing else. The app asks you the first time; declined, the phone's own voice reads the reply and nothing is sent.
• Dictation. Uses Apple's speech recognition, which may process your voice on the phone or on Apple's servers under Apple's privacy policy. The words land in the message box and are sent only when you tap send. The app asks you the first time.
• Kept on the phone. Your chat history, grow log, camera checks, reminders, settings and a diagnostics log of what the app did. None of it is uploaded; the diagnostics log leaves the phone only if you copy or share it yourself. Deleting the app removes all of it.
• Remote machine. If you pair a desktop, the commands, file reads and edits you ask for travel to that machine over your own Tailscale network. Crowe Logic's servers are not involved.
• Your account. Settings, Your Crowe ID, Delete account deletes your Crowe ID and the plan on it through the gateway and signs the phone out.

Sign-in and payment

Crowe ID at id.crowelogic.com holds your email, name and plan. Stripe processes payment; Crowe Logic never sees your card number. The console's daily update check asks PyPI for the current version and sends nothing about you.

Your own keys

If you set inference keys for the frontier picks or point the console at an endpoint you host, those keys are read from your environment file and sent only to the endpoint you configured. They are never sent to Crowe Logic.

Requests

To see or delete what Crowe Logic holds about you, write to michael@crowelogic.com from the address on your Crowe ID.

Refunds and cancellation

First purchase

If Crowe Logic is not right for you, write to michael@crowelogic.com within 14 days of your first paid subscription charge and we will refund it in full to the original payment method. No questions and no forms.

Renewals

Renewal charges are not refunded. Cancel before your renewal date to avoid the next charge; the Stripe customer portal (crowe billing) shows that date. After you cancel, access continues to the end of the period you have already paid for.

Annual plans

The same 14-day window applies to a first annual charge. After that, an annual plan runs to the end of its term; we do not prorate.

Contracts

Team, Enterprise and any plan bought under a signed agreement follow the refund terms in that agreement. Where the agreement is silent, this page applies.

Purchases through agents

A subscription bought through an AI agent or marketplace that lists Crowe Logic is covered by this page in the same way as one bought at crowelogic.com. Refunds are issued by Crowe Logic to the payment method used, whichever channel you bought through.

Digital delivery

Crowe Logic is software delivered by download and sign-in. There is nothing to ship and nothing to return.

Security

Sign-in

Sign-in runs through Crowe ID, an OpenID Connect provider, using the authorization-code flow with PKCE. The console stores the resulting tokens with owner-only file permissions and refreshes them itself; crowe logout removes them. The web app keeps its session in a cookie marked HttpOnly, Secure and SameSite.

Keys stay with you

The CroweLM tiers need no keys from you. Any keys you add for the frontier picks or a self-hosted endpoint stay on your machine and go only to the endpoint you named. The tiers are instructed never to print credentials, and the console's guardrails redact common key shapes from output.

What the agent may do

Every tool the agent can touch sits behind an autonomy level you set: read-only, edit, or execute. Shell commands run as your user, on your machine, under that level. Nothing runs on our side on your behalf.

Reporting

Report a vulnerability to michael@crowelogic.com. We will acknowledge it and tell you what we did.