Privacy Policy

Last updated: August 10, 2026

This Privacy Policy explains what personal data Krafto collects, how we use it, and the choices you have. It applies to the Krafto website and account services at store.krafto.in.

1. What we collect

Directly from you:

Account details — name, email address, and password (stored hashed, never in plain text);
Profile details you choose to add — phone, address, country, birth date, avatar;
Content you submit — reviews, ratings, support requests, problem reports;
Payment metadata — order amount, status, and Razorpay transaction/order IDs. We do not receive or store your card, UPI, or bank details.

Automatically:

Basic technical data (IP address, browser, device) via our hosting provider's standard request logs;
Local preferences — theme (light/dark) and cart contents — stored via cookies/local storage in your browser.

2. How we use it

To create and secure your account, and authenticate you;
To process orders and subscriptions, and deliver purchased content;
To send transactional email (order receipts, account notices) and, if you opt in, product updates;
To respond to support requests and problem reports;
To maintain and improve the Service, and to prevent abuse.

3. Who we share it with

We use a small number of service providers to run Krafto:

Supabase — database, authentication, and file storage;
Razorpay — payment processing;
Resend — transactional email delivery;
Vercel — application hosting.

We do not sell your personal data. We share it with these providers only as needed to operate the Service, and disclose it if required by law.

4. Data retention

We retain account and order data for as long as your account is active, and for a reasonable period after deletion where needed for legal, tax, or fraud-prevention purposes. You can request deletion at any time (see below).

5. Your rights

You can review and update most of your data directly from Account settings. You may also request a copy of your data, correction, or deletion by contacting support@krafto.app. Where the Digital Personal Data Protection Act, 2023 (India) or another applicable data protection law grants you additional rights, we will honor them.

6. Cookies and local storage

We use cookies/local storage for session authentication, theme preference, and cart contents. These are functional, not advertising cookies — Krafto does not run third-party ad tracking.

7. Children

The Service is not directed at children under 18, and we do not knowingly collect data from them.

8. Changes to this policy

We may update this Privacy Policy from time to time; material changes will be reflected by an updated "Last updated" date above.

9. Contact

Questions about this policy or your data can be sent to support@krafto.app.