Effective August 13, 2026
Privacy Policy
This policy explains what Craft collects, why we use it and the choices available to you.
1. Who we are
Craft is a service operated by OpenProduct, Inc. This policy applies to Craft’s website, accounts, design tools, public sharing pages, checkout support and order management.
2. Information we collect
- Account information: email address, username, authentication records and account preferences.
- Design content: prompts, messages, uploaded reference images, generated artwork, design versions and publishing choices.
- Order information: selected designs, size, quantity, order status, delivery address, contact details and support history.
- Payment information: Stripe processes card and payment details. Craft receives transaction identifiers, payment status and amounts, not your complete card number.
- Usage information: page views, feature actions, referral details, approximate device and browser information, errors and security logs.
3. How we use information
- Provide accounts, create and save designs, and operate public sharing you request.
- Review, manufacture, deliver and support custom orders.
- Process payments, prevent fraud and protect Craft and its customers.
- Understand product usage, diagnose errors and improve the service.
- Communicate about accounts, orders, policy changes and support requests.
- Comply with law and enforce our Terms.
4. Automated design processing
Prompts, current artwork and reference images may be sent to an AI service provider so it can interpret a request or create an image. Reference images attached to a Studio message are used for that request and are not intentionally saved as standalone files in Craft storage. Generated outputs and saved design versions are stored with your account.
Do not upload sensitive personal information or an image you do not have permission to use.
5. When we disclose information
We disclose information only as reasonably needed to operate Craft, including to:
- Supabase for authentication, database, storage and server-side product functions.
- Stripe for checkout, payment, tax and refund processing.
- AI service providers for prompt interpretation and image generation.
- Manufacturing, fulfillment and delivery partners for the information needed to produce and deliver an order.
- PostHog for product analytics, error diagnosis and privacy-protected session replay.
- Advisers, authorities or other parties when required by law, to protect rights and safety, or in connection with a corporate transaction.
We do not currently sell personal information for money or use it for cross-context behavioral advertising.
6. Public designs and sharing
A design is not made public merely because you create it. If you publish a design or share a public link, the linked content can be viewed by anyone who receives the link and may be indexed or reshared. Remove or unpublish content before sharing if it contains information you do not want others to see.
7. Analytics and browser signals
Craft uses PostHog to measure product use and diagnose problems. Inputs are masked and customer/template imagery is blocked from session replay. Our current analytics setup respects a browser’s Do Not Track setting. Because Craft does not currently sell or share personal information for cross-context behavioral advertising, there is no separate advertising opt-out link.
8. Retention and security
We keep information for as long as reasonably needed to provide Craft, complete orders, maintain business and tax records, resolve disputes, enforce agreements and protect the service. Different records have different retention periods.
We use administrative, technical and organizational safeguards designed to protect information. No internet service can guarantee absolute security.
9. Your choices
- You can choose whether to publish or share a design.
- You can use browser Do Not Track to disable supported analytics collection.
- You may request access, correction or deletion of personal information, subject to identity verification and legal retention requirements.
Send a privacy request to openproductinc@gmail.com. We will not discriminate against you for exercising a privacy right provided by law.
10. Children, changes and contact
Craft is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child submitted information to Craft.
We may update this policy as the service or law changes. The effective date at the top identifies the current version. Questions may be sent to openproductinc@gmail.com.