Privacy Policy for CraftSnap
Last Updated: May 10, 2025
Welcome to CraftSnap! This Privacy Policy explains how CraftSnap ("we," "us," or "our"), located at ul. Błękitna 9, 43-430 Skoczów, POLAND, collects, uses, discloses, and protects your personal information when you use our website, craftsnap.ai (the "Site"), and the services offered through it (the "Services"). Our contact email for privacy inquiries is cs@craftsnap.ai.
Please read this Privacy Policy carefully. By accessing or using our Services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.
1. Information We Collect
We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("Personal Information").
a. Information You Provide Directly:
- Account Information: When you sign up for CraftSnap, we collect information provided through our authentication partner, Clerk (such as your name, email address). Your password is managed by Clerk.
- User-Submitted Content: Information you provide when using our Services, such as Instagram post URLs you submit for transformation or images you upload. The textual content of posts and images (if "AI Magic Pro" is used) are processed by our AI services.
- Payment Information: If you purchase credit packs, our payment processor, Stripe, will collect your payment card information. CraftSnap does not directly store your full payment card details. We may receive transaction identifiers and summary information from Stripe.
- Communications: If you contact us directly (e.g., via cs@craftsnap.ai for support), we may receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
b. Information We Collect Automatically When You Use Our Services:
- Usage Information: We collect information about your interactions with our Services, such as the features you use, the transformations you perform, AI enhancements utilized, and other actions you take. This is facilitated through our analytics provider, PostHog, subject to your consent where legally required.
- Log Data and Device Information: When you visit our Site, our servers (and those of our third-party service providers) automatically record information that your browser sends. This log data may include your Internet Protocol (IP) address, browser type and settings, the date and time of your request, how you used CraftSnap, and cookie data.
- Cookies and Similar Tracking Technologies: We and our third-party partners use cookies and similar tracking technologies. For detailed information, please see Section 8 ("Cookies and Tracking Technologies").
c. Information from Third-Party Services:
- Instagram Post Data (via Apify): When you provide an Instagram URL, we use Apify, a third-party scraping service, to fetch publicly available data from that Instagram post, including images, captions, and hashtags, solely at your direction.
- Clerk: We use Clerk for user authentication and management. We receive user profile information from Clerk.
- Google (Gemini AI): The textual content and, if you choose "AI Magic Pro," images associated with your Instagram posts or uploads are sent to Google's Gemini AI service for processing and enhancement.
- Stripe: Used for payment processing.
2. How We Use Your Information
We use the information we collect for purposes including:
- To provide, operate, maintain, and improve our Services.
- To process your transactions (e.g., credit pack purchases).
- To personalize your experience.
- To understand and analyze how you use our Services (via PostHog analytics, with appropriate consent) to develop new products, services, and features.
- To communicate with you for customer service, service updates, and (with your consent where required) marketing purposes.
- To send transactional emails (e.g., welcome emails, payment confirmations).
- For compliance with legal obligations, enforcing our Terms of Service, and protecting our rights.
- To detect and prevent fraud, security, or technical issues.
3. How We Share Your Information
We may share your Personal Information with third-party vendors and service providers that perform services on our behalf:
- Clerk: Authentication and user management.
- Stripe: Payment processing.
- Google (Gemini AI): AI content generation and enhancement.
- Apify: Scraping public Instagram post data at your request.
- PostHog: Product analytics (subject to consent).
- Transactional Email Providers: (e.g., Resend, SendGrid) For application-related emails.
- Hosting Providers: (e.g., Vercel) For application and data hosting.
We may also share Personal Information:
- With your explicit consent.
- If required by law or legal process.
- To protect the rights, property, or safety of CraftSnap, our users, or others.
- In connection with a business transaction (e.g., merger, acquisition).
We do not sell your Personal Information.
4. Legal Basis for Processing (Primarily for EEA Users)
If you are from the European Economic Area (EEA), our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in_which we collect it. However, we will normally collect Personal Information from you only:
- Where we need the Personal Information to perform a contract with you (e.g., to provide the CraftSnap Services you requested).
- Where the processing is in our legitimate interests and not overridden by your rights (e.g., for analytics (with consent), fraud prevention).
- Where we have your consent to do so (e.g., for marketing communications, non-essential cookies).
5. Data Security
We implement reasonable technical and organizational measures designed to protect the security of your Personal Information. However, no internet-based site can be 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain Personal Information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws, unless a longer retention period is required or permitted by law.
7. Your Data Protection Rights (GDPR)
As we operate from Poland (EU), we are committed to upholding your rights under the General Data Protection Regulation (GDPR). You have the following rights regarding your Personal Information:
- The right to access: You can request copies of your personal data.
- The right to rectification: You can request that we correct any inaccurate information or complete incomplete information.
- The right to erasure (right to be forgotten): You can request that we erase your personal data, under certain conditions.
- The right to restrict processing: You can request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing: You can object to our processing of your personal data, under certain conditions (e.g., for direct marketing).
- The right to data portability: You can request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
- The right to withdraw consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.
To exercise these rights, please contact us at cs@craftsnap.ai. We will respond to your request in accordance with applicable data protection laws. You also have the right to lodge a complaint with a supervisory authority if you believe our processing of your Personal Information infringes applicable law.
8. International Data Transfers
Your information, including Personal Information, may be processed in countries other than your country of residence, including outside the European Economic Area (EEA), where data protection laws may differ. Our third-party service providers (e.g., Google, Stripe, Clerk, Apify, PostHog, Vercel) may also process data internationally. We take steps to ensure that your Personal Information receives an adequate level of protection in the jurisdictions in which it is processed, including through Standard Contractual Clauses or other appropriate transfer mechanisms where required.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies.
- Essential Cookies: Necessary for the Site to function (e.g., Clerk uses cookies for session management). These do not require consent.
- Analytics Cookies: We use PostHog to help us understand how our Services are used and to improve them. These cookies are only placed with your explicit consent, which you can manage via our cookie consent banner.
- Managing Cookies: Most web browsers allow you to control cookies through their settings preferences. Our cookie consent banner provides options to manage your preferences for non-essential cookies.
10. Children's Privacy
Our Service is not intended for individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at cs@craftsnap.ai.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: CraftSnap, ul. Błękitna 9, 43-430 Skoczów, POLAND, Email: cs@craftsnap.ai