Privacy Policy

Last updated: 22 December 2025

1. Introduction

Craftd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered artwork customization platform.

By using Craftd, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address (required for account creation)
  • Name (optional)
  • Avatar/profile picture (optional)
  • Authentication information (for secure login)
  • User role (USER, ARTIST, or ADMIN)
  • Account credits balance
  • Account status (active/inactive)
  • Account creation and update timestamps

2.2 Artist Profile Information

If you register as an artist, we additionally collect:

  • Biography
  • Website URL
  • Social media links
  • Commission rate
  • Verification status
  • Total earnings and pending payout amounts

2.3 Template Information

For artists who create templates, we store:

  • Template title and description
  • Template image URL
  • AI prompt used for generation
  • Category and tags
  • View and generation counts
  • Active and featured status

2.4 Generation Data

When you generate artwork, we store:

  • Your uploaded image URL
  • Generated result image URL
  • Watermarked version of the result (for preview)
  • Generation status and any error messages
  • The AI prompt used for generation
  • Creation and completion timestamps

2.5 Purchase Information

When you make a purchase, we collect:

  • Purchase type (download, print A5/A4/A3)
  • Purchase amount
  • Stripe payment ID (for payment processing)
  • Purchase status
  • For print orders: Prodigi order ID, order status, tracking number
  • Shipping address (for print orders)

2.6 Credit Purchase Information

When you purchase credits, we store:

  • Number of credits purchased
  • Purchase amount
  • Stripe payment ID
  • Purchase status

2.7 Commission and Payout Data

For artists, we track:

  • Commission amounts and percentages
  • Purchase references
  • Commission status and payment dates
  • Payout amounts, methods, and status
  • Payout references and admin notes

2.8 Notification Data

We store in-app notifications including:

  • Notification title and message
  • Notification type
  • Read status
  • Additional notification data
3. Ownership and Intellectual Property Rights

3.1 Template Ownership

Artists retain full ownership and intellectual property rights to all templates they create and upload to Craftd. This includes:

  • The template design and concept
  • The template image
  • The AI prompt associated with the template
  • All associated metadata (title, description, tags, etc.)

Artists grant Craftd a license to display, distribute, and use templates on the platform for the purpose of enabling users to generate personalized artwork.

3.2 Generation Ownership - Purchased Generations

Once a generation is purchased, the user who made the purchase owns the generated artwork. This ownership includes:

  • The right to use the generated image for personal or commercial purposes
  • The right to download the high-resolution, unwatermarked version
  • The right to order prints of the artwork
  • Full intellectual property rights to the generated result

The underlying template remains owned by the artist, but the specific generated variation becomes the property of the purchasing user.

3.3 Generation Ownership - Unpurchased Generations

Unpurchased generations (generations that have not been purchased) are owned by the artist whose template was used. This approach ensures that:

  • Artists maintain control over derivative works created from their templates until purchase
  • Users must purchase generations to obtain ownership rights
  • The platform can display watermarked previews without transferring ownership

Users retain the right to purchase their generated artwork at any time to obtain full ownership. Once purchased, ownership transfers from the artist to the user as described in section 3.2.

3.4 User-Uploaded Images

Users retain full ownership of images they upload to the platform. We use these images solely for the purpose of generating personalized artwork and do not claim any ownership rights over user-uploaded content.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send you technical notices and support messages
  • Respond to your comments and questions
  • Process artist commissions and payouts
  • Fulfill print orders through our third-party fulfillment partner (Prodigi)
  • Send in-app notifications about your account activity
  • Monitor and analyze usage patterns to improve our platform
  • Detect, prevent, and address technical issues
5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We do not share your data with any external parties except in the following limited circumstances:

  • Payment Processing: We share payment information with Stripe to process credit card transactions. Stripe's use of your information is governed by their privacy policy.
  • Print Fulfillment: For print orders, we share shipping addresses and order details with Prodigi to fulfill your print orders. Prodigi's use of your information is governed by their privacy policy.
  • Authentication: We use Auth0 for user authentication. Auth0's use of your information is governed by their privacy policy.
  • Image Storage: We use third-party cloud storage services to store and serve images. The service provider's use of your information is governed by their privacy policy.
  • AI Generation: We use third-party AI services to generate artwork. Images are processed according to the service provider's privacy policy.
  • Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities.
6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Your data is stored in secure databases with access controls, and we use industry-standard encryption for data in transit.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.

8. Your Rights (UK GDPR)

Under UK GDPR, you have the following rights:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request correction of inaccurate or incomplete data.
  • Right to Erasure: You can request deletion of your personal data in certain circumstances.
  • Right to Restrict Processing: You can request that we limit how we use your data.
  • Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
  • Right to Object: You can object to processing of your personal data in certain circumstances.
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

9. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under UK GDPR, please contact us at charlie@bristol-apps.com.