Privacy Policy

CraftVendr operates the craftvendr.com platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

Information you provide:

• Account data: Full name, email address, password (stored as bcrypt hash)
• Shop data: Shop name, display name, tagline, bio
• Product data: Product titles, descriptions, prices, images
• Inquiry data: Name, email, message (submitted by Buyers)
• Payment data: Not collected during the founding period (no card is required to sign up). When paid plans launch in the future, payments will be processed by our payment provider — we will not store card numbers or bank details.

Information collected automatically:

• Usage data: Pages visited, features used, timestamps
• Device data: Browser type, operating system, IP address
• Cookies: Session cookies for authentication; analytics cookies (see Section 5)

We use your information to:

• Provide and maintain the CraftVendr service
• Process subscription payments if and when you choose a paid plan in the future
• Send transactional emails (such as inquiry notifications)
• Display your storefront and products publicly at your storefront URL
• Generate AI-powered product descriptions, where offered
• Improve our service and fix issues
• Comply with legal obligations

We do not:

• Sell your personal data to third parties
• Use your data for advertising or behavioral targeting
• Share Buyer inquiry data with anyone other than the Seller who received the inquiry

We share data only with:

• Payment provider (Razorpay): Payment processing — only if and when paid plans launch and you choose to subscribe
• AI Provider (Anthropic): Product listing text for AI description generation. No personal data is sent.
• Email Service (Resend): Seller email addresses for transactional notifications
• Hosting Provider (DigitalOcean): Infrastructure hosting
• Law enforcement: When required by applicable law

We use:

• Essential cookies: Session authentication (required for the service to function)
• Analytics cookies: To understand how the service is used (you may opt out via browser settings)

We do not use advertising or tracking cookies.

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Product data: Retained while your account is active. Deleted with account.
• Inquiry data: Retained while the associated product exists.
• Payment records: Once paid plans launch, retained for 7 years as required by Indian tax law. No payment records are created during the free founding period.

You have the right to:

• Access your personal data (via your account dashboard)
• Correct inaccurate data (via your account settings)
• Delete your account and associated data
• Export your data (CSV export of leads, where offered)
• Object to processing — contact us at support@craftvendr.com

We protect your data with encrypted passwords (bcrypt hashing), HTTPS encryption for all data in transit, access controls on our infrastructure, and regular security reviews.

No system is 100% secure. We take reasonable measures to protect your data.

CraftVendr is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors.

CraftVendr is operated from India. If you access the service from outside India, your data may be transferred to and processed in India.

We may update this policy at any time. Material changes will be communicated via email. Continued use after changes constitutes acceptance.

For privacy-related questions or requests, contact us at: support@craftvendr.com