Privacy Policy

1. Introduction

Crafex (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our platform.

Our fundamental principle is that your data belongs to you. Whenever possible, file processing happens locally in your browser. We do not upload, store, or transmit your documents to our servers without your explicit consent.

2. Information We Collect

We collect only the information necessary to provide and improve our services:

• Email Address — required for account creation, login, and communication regarding your subscription or support requests.
• Payment Information — when you subscribe to a paid plan, payment details are collected and processed securely by Razorpay. We do not store full payment card numbers on our servers.
• Authentication Data — hashed password, session tokens, and login metadata to secure your account.
• Basic Usage Information — anonymous feature usage statistics, page views, and tool interactions to help us improve the platform.
• Cookies — essential cookies for authentication, session management, and security preferences. No unnecessary tracking cookies are used.
• Security Logs — IP addresses, browser user-agent strings, and request timestamps for fraud detection and platform security.

3. How We Use Your Information

• To create and maintain your account.
• To process subscription payments and manage billing.
• To provide customer support and respond to inquiries.
• To analyze usage patterns and improve platform performance.
• To detect and prevent fraudulent or unauthorized access.
• To communicate service updates, policy changes, and promotional offers (with your consent).

4. File Storage

Crafex does not permanently store your PDF files or documents unless you explicitly enable Cloud Storage. Files processed through our PDF tools are handled temporarily in your browser or in memory during processing and are automatically discarded afterward. When Cloud Storage is enabled, your files are encrypted and stored securely on Cloudflare R2 infrastructure. You retain full control over your stored files and can delete them at any time.

5. Payment Processing

All payments on Crafex are processed securely through Razorpay, a PCI-DSS compliant payment gateway. Your payment card details are transmitted directly to Razorpay over encrypted channels. We never store full payment card numbers, CVV codes, or ATM PINs on our servers. Razorpay's privacy policy governs the handling of your payment data.

6. Cookies

We use the following types of cookies on the Crafex platform:

• Authentication Cookies — to keep you logged in during your session.
• Session Cookies — to maintain your preferences and settings.
• Security Cookies — to detect and prevent fraudulent activity.
• Preference Cookies — to remember your guest mode and UI preferences.

We do not use advertising cookies, third-party tracking cookies, or social media pixels. You can manage cookie settings through your browser preferences at any time.

7. Third-Party Services

We integrate with the following third-party services to operate the Crafex platform:

• Razorpay — payment processing and subscription management.
• Cloudflare R2 — encrypted file storage for Cloud Storage feature.
• Redis — caching and session management.
• BullMQ — background job processing for PDF and document generation.
• PostgreSQL — primary database for user accounts and application data.
• Prisma — database ORM and query management.
• Vercel — application hosting and deployment.
• Google Fonts — web font delivery for consistent typography.

Additional third-party services may be integrated in future updates. We will update this policy accordingly. Each third party operates under its own privacy policy and data processing agreement.

8. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data transmitted between your browser and our servers.
• Encrypted storage for sensitive data at rest.
• Hashed and salted passwords using bcrypt.
• Regular security audits and vulnerability assessments.
• Access controls and authentication for internal systems.

9. Data Retention

We retain your personal data only as long as necessary to provide our services or as required by law. Account data is retained for the duration of your account. If you delete your account, we delete or anonymize your personal data within 30 days, except where legal obligations require retention.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access — request a copy of the data we hold about you.
• Right to Rectification — request correction of inaccurate data.
• Right to Deletion — request deletion of your personal data.
• Right to Data Portability — request transfer of your data to another service.
• Right to Object — object to the processing of your data for certain purposes.

To exercise any of these rights, please contact us at crafexone@gmail.com. We will respond to your request within 30 days.

11. Children's Privacy

Crafex is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through a notice on our website. Continued use of Crafex after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: crafexone@gmail.com
Founder: Darshan Chawan