Privacy Policy

Last updated: January 2026

1. Introduction

CraftAI Platform ("we," "our," or "us") is committed to protecting your privacy. This policy explains how we handle your information when you use our workflow automation services and website.

2. Information We Collect

2.1 Information You Provide

  • Account Data: Email, name, and credentials during registration
  • Payment Data: Billing details processed through secure payment providers
  • Workflow Data: Configuration files, pipeline definitions, and execution logs
  • Communications: Messages sent through support channels

2.2 Automatically Collected

  • Usage Metrics: API call patterns, feature usage, and session data
  • Device Info: Browser type, OS, and device identifiers
  • Log Data: IP address, access timestamps, and request metadata

3. How We Use Data

  • Provide, operate, and improve the platform
  • Process billing and send transaction receipts
  • Send system alerts, updates, and security notifications
  • Monitor infrastructure health and detect anomalies
  • Analyze usage patterns to optimize performance
  • Comply with legal obligations

4. Data Retention

  • Account Data: Retained until account deletion
  • Workflow Logs: Retained for 30 days, then purged
  • Payment Records: Per financial regulations
  • Analytics: Aggregated and anonymized after 90 days

5. Data Processing Policy

Your Data is Never Used for Training

Workflow data, pipeline configurations, and execution outputs are never used to train our models. Your data is processed solely to deliver the service you requested.

6. Data Sharing

We do not sell personal information. Sharing occurs only in these cases:

  • Infrastructure Providers: Cloud hosting and CDN partners
  • Legal Requirements: When required by law or court order
  • Business Transfers: In connection with M&A activity
  • With Consent: When you explicitly authorize sharing

7. Security Measures

  • TLS 1.3 for all data in transit
  • AES-256-GCM encryption at rest
  • Regular penetration testing and security audits
  • SOC2 Type II compliance (planned)
  • Role-based access controls and MFA

8. Your Rights

  • Access: Request a copy of your data
  • Correction: Fix inaccurate information
  • Deletion: Request data removal
  • Portability: Export your data
  • Objection: Opt out of certain processing

Contact: privacy@craftaiplatform.com

9. Cookies

  • Essential: Required for platform operation
  • Analytics: Help us understand usage patterns
  • Preferences: Remember your settings

10. Changes to Policy

We may update this policy periodically. Material changes will be communicated via email and in-app notification.

11. Contact