Privacy policy
This policy explains what craftpage collects when you use craftpage.app, why, and what you can ask us to do about it. We collect as little as the service can work with.
1. What we collect
Information you give us
- Account details — your name and email address. If you sign in with Google we receive your name, email address and profile picture from Google; we never receive your Google password.
- Your content — the photos, captions, titles and design choices you put into a page.
- Support messages — what you write to us, so we can answer it.
Information we generate
- Purchase records— which pack was bought for which page, when, for how much, and the gateway’s transaction reference. We need these for tax and accounting.
- Technical logs — IP address, browser type and request times, kept to keep the service secure and to diagnose faults.
What we never receive
Card and bank details. Payments are handled entirely by PayU on their own pages. We are told whether a payment succeeded and a reference for it — never the instrument you paid with.
2. Why we use it
| Purpose | Basis |
|---|---|
| Running your account and showing your pages | Performing our contract with you |
| Taking payment and applying a pack | Performing our contract with you |
| Keeping records of sales | Legal obligation (tax) |
| Security, fraud prevention and fault diagnosis | Our legitimate interest in a service that works |
| Service emails (sign-in links, receipts, expiry notices) | Performing our contract with you |
We do not sell your personal information, and we do not use your photos to train machine-learning models.
3. Who processes it
We use a small number of providers to run the service. They act as processors on our instructions and may not use your data for their own purposes.
| Provider | What it handles | Where |
|---|---|---|
| Microsoft Azure | Application hosting and the database — accounts, pages, orders | India |
| Cloudinary | Image storage and delivery — the photos you upload | Global content-delivery network |
| Google Firebase Hosting | Serving the website itself | Global content-delivery network |
| PayU | Payment processing | India |
| Zoho Mail | Sending service email | India |
| Google Sign-In | Optional sign-in | Global |
Because images are served from a content-delivery network, copies of a published photo may be cached on servers outside India so that pages load quickly.
4. Who can see your pages
A page is private until you publish it. When you do, anyone holding its link can view it — a share link is not a secret, so treat it as public. Setting a page back to private stops it being viewable.
A page whose pack has expired stops being publicly viewable automatically. The content stays in your account.
5. How long we keep it
- Your content — until you delete it, or until you delete your account. Deleted items sit in the trash for 30 days first, so an accident can be undone.
- Account details — while your account exists.
- Purchase and tax records — eight years from the end of the financial year they belong to, as Indian tax law requires. This applies even after you close your account.
- Technical logs — up to 90 days.
6. Storage and security
Passwords are stored only as bcrypt hashes; we cannot read them. Connections use HTTPS. Administrative access requires a second factor. Each account has 10 GB of storage.
No service can promise perfect security. If a breach affects your personal data we will tell you and the relevant authority as the law requires.
7. Your rights
You may ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate;
- delete your account and content — subject to the tax records above, which we must keep; or
- stop sending you non-essential email.
Write to support@craftpage.app and we will respond within 2 working days.
8. Cookies and local storage
We use browser local storage to keep you signed in, and a cookie for the administrative console. We do not use advertising or cross-site tracking cookies.
9. Children
The service is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will remove it.
10. Changes
We will post any update here and change the date at the top. Material changes will be notified by email.
11. Contact
craftpage
support@craftpage.app