Privacy Policy

1. Information We Collect

Account information

• Email address and name (provided when you register via Clerk)
• Profile photo (if you choose to upload one)
• Authentication data managed by Clerk

Usage data

• Text prompts you submit for image generation
• Generated images (stored in your personal gallery if you choose to save them)
• Number of stickers used and remaining
• Plan type and subscription status

Payment information

• Payment is processed by Stripe. We do not store your card number or full payment details
• We retain a reference to your Stripe customer ID to manage your subscription

Technical data

• IP address, browser type, and device information (collected automatically by Sentry for error monitoring and Vercel Analytics for aggregate traffic insights)
• Pages visited and actions taken on craftix.co (anonymous, aggregate only via Vercel Analytics)
• Error logs and crash reports (via Sentry — may include browser/OS details)

Telegram data (optional)

• If you choose to export stickers to Telegram via @CraftixStickerBot, we temporarily store your Telegram user ID to create your sticker pack. This data is not used for any other purpose.

Cookies & local storage

We use only essential, functional storage — we do not use advertising or cross-site tracking cookies, so no cookie-consent banner is required to use Craftix.

• Functional (Craftix): browser localStorage remembers your theme, motion preference, dismissal of the announcement bar, and whether you have seen the launch popup. No tracking cookies are set by Craftix itself.
• Essential (third party): Clerk (authentication) and Stripe (payment) set their own cookies needed to keep you signed in and to process payments securely.
• Analytics: Vercel Analytics measures aggregate traffic without cookies and without tracking individual users.

2. How We Use Your Information

• To create and manage your account
• To process your image generation requests
• To manage your subscription, billing, and sticker balance
• To enforce our Terms of Service and Content Policy
• To monitor for errors, bugs, and abuse (via Sentry)
• To understand aggregate usage trends and improve the Service (via Vercel Analytics — no individual tracking)
• To send transactional emails (account confirmation, billing receipts) via Resend
• To respond to your support enquiries

We do not sell your personal information. We do not use your prompts or generated images to train AI models.

3. Third-Party Services

We use the following third-party services to operate Craftix. Each has its own privacy policy:

4. International Data Transfers

Craftix is operated from Australia. However, the third-party services we use (Clerk, Supabase, fal.ai, Stripe, Sentry, Vercel) may store and process your data on servers located in the United States or other countries. By using Craftix, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

5. Data Retention

• Account data is retained for as long as your account is active
• Saved sticker images are retained until you delete them or close your account
• Prompts submitted for generation are not retained after the generation completes
• On account deletion, we delete your user record, saved stickers, and Supabase storage files. Stripe retains billing records as required by law.
• Aggregate analytics and error logs may be retained for up to 12 months

6. Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Request deletion of your account and personal data — available directly via Settings → Account → Delete Account
• Withdraw consent to processing, where consent is the legal basis

To exercise any of these rights, contact us at hello@craftix.co. We will respond within 30 days.

7. European Economic Area, UK & Swiss Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent laws. These rights are in addition to those listed in Section 6.

• Legal bases: we process your data to perform our contract with you (to provide the Service), on the basis of your consent (where applicable), and for our legitimate interests (security, fraud prevention, and improving the Service)
• Your rights: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to processing
• Withdraw consent at any time, without affecting processing already carried out
• No automated decision-making: we do not subject you to automated decision-making or profiling that produces legal or similarly significant effects
• Complaints: you may lodge a complaint with your local data protection authority

International transfers of your data (see Section 4) are carried out with appropriate safeguards. To exercise any of these rights, contact us at hello@craftix.co.

8. California Users (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA):

• Right to know what personal information we collect and how we use it (described throughout this policy)
• Right to delete your personal information — available directly via Settings → Account → Delete Account, or by emailing us
• Right to correct inaccurate personal information
• Right to opt out of the "sale" or "sharing" of personal information

We do not sell or share your personal information, and we do not use your prompts or generated images to train AI models. We will not discriminate against you for exercising any of these rights. To make a request, contact us at hello@craftix.co.

9. Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and server-side authentication. However, no system is completely secure — you use Craftix at your own risk.

10. Children's Privacy

Craftix is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly. If you believe a child has provided us their information, contact us at hello@craftix.co.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on craftix.co. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy enquiries or to exercise your rights, contact us at hello@craftix.co.

Craftix is operated as a sole trader business in Victoria, Australia (ABN registered).