Craftgineer Inc. ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services at craftgineer.com.
2. Information We Collect
We collect the following types of information:
Account Information: Email address, name (if provided via Google sign-in), and profile picture URL.
Payment Information: Processed securely by Stripe. We store only your Stripe customer ID, not your credit card details.
Usage Data: Credit balance, feature usage, and basic tool-operation records tied to your account, such as credits used and whether an operation succeeded.
Optional Analytics Data: With your consent, we collect normalized page categories, tool codes, first-session source tags, browser and device type, and language. Random visitor and session identifiers are stored only as versioned HMAC hashes. We do not store your IP address, country, raw referrer URL, advertising identifiers, files, prompts, or entered names in analytics.
Device Information: Browser type and device fingerprint hash (for fraud prevention).
Cookies: Authentication and preference cookies. See our Cookie Policy.
3. How We Use Your Information
To provide and maintain our services
To process payments and manage subscriptions
To send transactional emails (welcome, purchase confirmations, password resets)
To prevent fraud and abuse of our free credit system
To analyze consent-qualified usage patterns and improve our services
To respond to your inquiries and support requests
4. Data Sharing
We do not sell your personal data. We share data only with:
Stripe: For payment processing
Google: If you use Google sign-in (OAuth)
Mailgun: For sending transactional emails
AI Providers: Your uploaded files/prompts may be processed by AI services to provide our tools
ip-api.com: When you sign in, your IP address is sent to this service over an unencrypted HTTP connection to determine country for fraud prevention. We also store the IP address in account-security records.
5. Data Retention
We retain your account data for as long as your account is active. Optional analytics visitor identifiers expire after 13 months and session identifiers after 30 minutes. You can withdraw analytics consent at any time from the Cookie Policy. You can request deletion of your account and associated data by contacting us. Payment records may be retained as required by law.
6. Your Rights
Depending on your location, you may have the right to:
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), secure password hashing, and limited access controls. However, no method of transmission over the Internet is 100% secure.
8. Children's Privacy
Our services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us immediately.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email.
10. Contact Us
If you have questions about this privacy policy or our data practices, contact us.