Privacy Policy | Craftgineer

1. Introduction

Craftgineer Inc. ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services at craftgineer.com.

2. Information We Collect

We collect the following types of information:

Account Information: Email address, name (if provided via Google sign-in), and profile picture URL.
Payment Information: Processed securely by Stripe. We store only your Stripe customer ID, not your credit card details.
Usage Data: Credit balance, feature usage, and interaction with our AI tools.
Analytics Data (logged-in users only): Pages visited, referrer URL, browser type, operating system, device type (desktop/mobile/tablet), and country (derived from IP address). We do not store your IP address.
Device Information: Browser type and device fingerprint hash (for fraud prevention).
Cookies: Session cookies for authentication. See our Cookie Policy.

3. How We Use Your Information

To provide and maintain our services
To process payments and manage subscriptions
To send transactional emails (welcome, purchase confirmations, password resets)
To prevent fraud and abuse of our free credit system
To analyze usage patterns and improve our services (logged-in users only)
To respond to your inquiries and support requests

4. Data Sharing

We do not sell your personal data. We share data only with:

Stripe: For payment processing
Google: If you use Google sign-in (OAuth)
Mailgun: For sending transactional emails
AI Providers: Your uploaded files/prompts may be processed by AI services to provide our tools
ip-api.com: Your IP address is sent to this service to determine your country for analytics (the IP is not stored by us)

5. Data Retention

We retain your account data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us. Payment records may be retained as required by law.

6. Your Rights

Depending on your location, you may have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing of your data
Data portability
Withdraw consent

To exercise these rights, contact us.

7. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), secure password hashing, and limited access controls. However, no method of transmission over the Internet is 100% secure.

8. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us immediately.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email.

10. Contact Us

If you have questions about this privacy policy or our data practices, contact us.