Privacy Policy | CraftFlow

1. Introduction

CYCLE Co., Ltd. ("we", "us", or "our") operates CraftFlow (https://www.craftflow-cy.com). This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

Account information: Your email address and password (hashed) when you register.
Payment information: Billing details are processed and stored securely by Stripe. We do not store your full card number.
Usage data: Pages visited, features used, listing content you generate, and log data (IP address, browser type, timestamps).
Content you upload: Product photos and text you submit for AI processing.

3. How We Use Your Information

To provide, maintain, and improve the CraftFlow service.
To process payments and manage your subscription.
To respond to support requests and communicate service updates.
To monitor and analyze usage patterns for service improvement.
To comply with legal obligations.

4. Third-Party Service Providers

We share your information with the following trusted third-party providers solely to operate the service:

Stripe— Payment processing. Your payment data is governed by Stripe's Privacy Policy.
Supabase — Database and authentication hosting.
Anthropic — AI processing of your product descriptions and images to generate listing content (used via API; data is not used to train models under our API agreement).
Google Analytics 4 (GA4) — We use Google Analytics to collect anonymized usage data (page views, feature interactions, conversion events) to understand how our service is used and improve the user experience. Data collected is governed by Google's Privacy Policy. You can opt out by using Google Analytics Opt-out Browser Add-on.

We do not sell your personal information to any third party.

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your data by contacting us at the email below. We will delete or anonymize your data within 30 days of a verified request, unless we are required to retain it for legal purposes.

6. Cookies & Analytics

We use essential cookies for authentication and session management. We also use the following analytics tools to understand how the service is used:

Google Analytics 4 (GA4) — Collects anonymized page view and interaction data via cookies (_ga, _ga_*). Data is processed by Google and subject to their Privacy Policy. GA4 uses IP anonymization by default.
PostHog — Product analytics for understanding feature usage patterns.

You can disable non-essential cookies in your browser settings or opt out of Google Analytics using the browser opt-out add-on.

7. Security

We implement industry-standard security measures including TLS encryption, database Row-Level Security (RLS), and regular security reviews. However, no method of transmission over the Internet is 100% secure.

8. Children's Privacy

CraftFlow is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by prominently posting a notice in the service.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@craftflow-cy.com