Craftify AI Privacy Policy

Effective Date: June 1, 2023

Last Updated: October 27, 2026

Craftify AI ("Craftify AI", "we", "us", "our") provides marketing, content, and lead management tools for local service businesses (for example: contractors, electricians, realtors, financial advisors, and other local businesses). We help small businesses create content, manage leads, send email campaigns, request reviews, and schedule social posts, without needing marketing experience.

This Privacy Policy explains how we collect, use, share, and protect your information when you use our websites, platform, and connected services (the "Service").

If you have any questions or want to exercise your privacy rights, you can contact us at contact@craftify.ai.

1. Information We Collect

We collect the following types of information:

1.1 Information you give us directly

• Contact details (name, email address, phone number, business name, business address).
• Account details (login email, password, profile settings, communication preferences).
• Your mobile phone number and, if you opt in, your consent to receive text messages from us (see section 5).
• Business profile details you enter (logo, brand voice, services, pricing, service area, etc.).
• Content you create or upload in Craftify AI (posts, campaigns, templates, messages, notes about leads).
• Support and sales communications (emails, chat messages, call notes).

1.2 Usage and technical data

• Pages/features you use, time spent, clicks, and actions in the Service.
• Device and browser info (browser type, operating system, and general region-level location).
• Log data that helps us keep the platform secure and running.

1.3 Data from connected platforms (for example, Facebook / Instagram / TikTok / Google)

If you choose to connect an external account to Craftify AI, for example Facebook, Instagram, Google Business Profile, TikTok, or similar, we receive the information that platform shares with us after you approve it.

This can include (depending on what you authorize):

• Your name / profile / page name.
• Your business Page or account ID.
• Profile photo / logo.
• Email address associated with that account.
• Permissions to publish posts, schedule posts, pull basic analytics or insights, or manage reviews on your behalf.
• Content you ask us to schedule or post.
• For advertising accounts you connect (for example Google Ads or Meta ad accounts): the account IDs, names, currency, time zone and status; the Pages you may advertise from; permission to create, edit, pause and resume the campaigns, ad sets and ads you ask us to publish; and the performance reports for those accounts (such as spend, impressions, reach, clicks and results). We only create or change ads when you ask us to, and you can disconnect the account at any time.
• For Facebook Page and Instagram messages you turn on in the Inbox: the messages people send to your Page or Instagram account (text, photos, videos, files, reactions and story replies), the sender's name, username and profile picture, and delivery and read receipts; and permission to send the replies you or your team write. We only send a message when someone on your team sends it, only in reply to a person who messaged you first, and never for advertising. Messages are kept with your Inbox conversations until you delete them or your account, and you can turn messages off or disconnect at any time.

We only use this data to provide the feature you requested (for example: scheduling a post, generating analytics, or helping you request reviews). We do not use this data for any purpose you did not authorize, and we do not sell it.

If you disconnect an external account, we stop receiving new data from that platform.

1.4 Public / business information

We may collect publicly available business information about your company (for example, public business contact email, public phone number, service descriptions from your website, logo, and brand messaging). We use this to help pre-fill your Craftify AI business profile and to personalize our platform for you.

For example, during onboarding, if you provide your website, we may automatically analyze publicly available information on that site (services offered, branding language, etc.) to help set up your profile. You can edit or remove this information at any time.

2. How We Use Your Information

We use the information described above to:

• Operate, maintain, and improve the Service.
• Help you generate, schedule, and publish marketing content (social posts, emails, ads, review requests, etc.).
• Help you manage leads and customer contacts.
• Communicate with you about your account and provide support.
• Send service-related notifications (for example: security alerts, feature updates, billing notices).
• Send marketing or onboarding emails about new features, templates, campaigns, or tips. You can opt out any time.
• Monitor performance, troubleshoot issues, and protect against fraud, abuse, or security threats.
• Comply with legal and regulatory requirements.

Where required by law, our legal bases for processing include: your consent, fulfilling our contract with you (providing the Service you signed up for), our legitimate interest in improving and securing our Service, and legal obligations we must follow.

2.1 How AI Features Use Your Information

Some parts of the Service use AI to generate marketing content (for example: draft emails, social posts, review requests, and headlines).

How we use your data:

• When you use AI features, we process the input you provide, your business details (services, tone/voice, locations), and relevant past content from your account to generate the requested output.
• We store that output in your account so you can review, edit, schedule, or send it. We do not publish or send AI-generated content without your approval.

De-identification and improvement:

• We may use de-identified and aggregated data (not tied to you or your leads) to improve the quality, safety, and relevance of our AI features.
• Before doing this, we remove personal identifiers (names, emails, phone numbers, addresses, business names, etc.), aggregate across accounts, and apply technical safeguards to reduce re-identification risk.

What we do NOT use for AI improvement (even in de-identified form):

• Your lead / customer contact lists (names, emails, phone numbers).
• Personal information about your clients or prospects.
• Private notes or internal communications.
• Payment, billing, login, or security credentials.

Third-party AI providers:

• Some AI features are powered by trusted third-party AI services.
• We send only the minimum data needed to generate content (for example, your input and relevant business context).
• We do not share your full contact lists, private notes, billing information, or credentials with these providers.
• These providers may use de-identified data to improve their services, under their own policies. We choose providers with strong privacy protections.

Your control:

• You can choose whether to use AI features.
• You can edit or delete AI-generated content.
• Where required by law, you may have the right to object to our use of de-identified data for model improvement. To make a request, contact us at contact@craftify.ai.

Regulated industries:

• If you work in a regulated field (for example, financial services, health, legal, real estate, insurance), you are responsible for ensuring that use of AI content and data handling complies with your professional and advertising rules. We do not provide legal or compliance advice.

3. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you signed in and maintain your session.
• Remember your preferences.
• Understand basic product usage so we can improve stability and usability.
• Measure performance of our marketing and onboarding campaigns.

We do not sell your data, and we do not use cookies to track you across unrelated websites for third-party targeted advertising. You can control cookies through your browser settings. Disabling cookies may affect some features.

4. How We Share Your Information

We share information only in these cases:

Service providers (processors).

We use trusted third parties to help us run Craftify AI. For example: cloud hosting, security and logging, foundational model providers, analytics, email/SMS delivery, payment processing, customer support tooling. These providers are only allowed to use your data to perform services for us and must protect it. SMS providers receive mobile numbers only to deliver messages; see section 5.

Connected platforms (you choose this).

If you ask us to post to your Facebook Page, schedule an Instagram post, request a Google review from a customer, or send an email campaign, we will send only the data needed to perform that action to the relevant platform under the permissions you granted.

Legal / safety.

We may disclose information if required by law, subpoena, or government request, or if we believe it's necessary to protect the rights, property, or safety of Craftify AI, our users, or others.

Business transfer.

If we are involved in a merger, acquisition, financing, or sale of all or part of our business, your information may be transferred as part of that transaction, as allowed by law.

We do not "sell" your personal information or "share" it for cross-context behavioral advertising or third-party marketing.

Google API Services User Data Policy

Craftify AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use, transfer, or sell data received from Google Workspace APIs, including Google Calendar, to develop, improve, or train generalized or foundational artificial intelligence or machine learning models, whether our own or those of any third party. Google Calendar data is used only to check your availability and to create, update, or remove the appointments you confirm, and it is never sent to any AI model or AI service provider.

Shopify Store Data

When you connect a Shopify store, Craftify AI processes your store's customer data on your behalf and only on your instructions. You remain the controller of that data; we act as your service provider (processor) and use it only to provide the features below.

• Blog publishing: we read your blogs and create the articles you publish. No customer data is involved.
• Contact sync (off until you turn it on): we copy each customer's name, email, phone, default address, tags, note, order count, total spent, and email and SMS marketing consent into your Craftify contacts. Orders from the last 60 days and new orders are added to the matching contact as purchases (order number, date, total, status, and line items).
• Store analytics: we read aggregated sales and traffic reports to show them in your Insights dashboard. These reports are not stored and contain no individual customer records.

Marketing consent is copied exactly as it is in Shopify. Customers who have not opted in to email or SMS marketing in Shopify are not included in your marketing sends. We do not sell Shopify customer data or use it for any purpose other than the features above.

5. SMS / Text Messaging

5.1 Text messages from Craftify AI

Craftify AI collects mobile phone numbers to send text messages to account owners and team members who have agreed to receive them. You opt in by entering your mobile number and checking the optional, unchecked SMS consent box during business onboarding in the Craftify AI app (or when you add a phone number to your account). Consent to receive text messages is not a condition of using the Service or of any purchase.

• What we send: account notifications, onboarding help, appointment reminders, and replies from our support team.
• Frequency: message frequency varies.
• Cost: message and data rates may apply.
• Opt out: reply STOP to any message to stop receiving texts. You will receive one message confirming that you have been unsubscribed.
• Help: reply HELP to any message, or email contact@craftify.ai.

When you opt in, we store your mobile number together with a record of your consent (when and where it was given) and the status of the messages we send you, so we can honor opt-outs and show proof of consent to carriers.

5.2 We do not share mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. The only exception is the SMS service providers and wireless carriers we use to deliver messages, which receive your number solely to send the messages you agreed to receive. All of the sharing categories described in section 4 exclude text messaging originator opt-in data and consent.

5.3 Messages your business sends through Craftify Connect

If your business uses Craftify Connect to text its own customers, your business is the sender of those messages and is responsible for collecting their consent. Craftify AI processes those phone numbers and consent records only on your behalf, to deliver your messages and honor opt-outs. We never sell them, share them for marketing, or use them to send our own messages.

6. Data Retention & Deletion

We keep personal information only as long as needed to provide the Service, support your account, meet legal or accounting obligations, and resolve disputes.

Examples:

• Account/profile data: kept while your account is active and for up to 2 years after closure to meet legal and record-keeping needs.
• Support and communications history: kept for 2 years so we can respond to follow-ups and improve support quality.
• Usage/analytics data: kept for 2 years to understand performance and reliability.

For data we receive from connected platforms (for example Meta / Google / TikTok):

• If you disconnect that account, we stop receiving new data.
• If you disconnect an external account, we stop receiving any new data from that platform. Historical data that was already synced into Craftify AI (for example, past campaign performance, scheduled content, or analytics snapshots) will remain in your account so that your reporting and history are not broken. If you would like us to delete that historical data, you can request deletion at any time by emailing contact@craftify.ai, and we will remove it within 30 days unless we are legally required to keep it (for example, for fraud prevention, billing, or compliance).

For data from a connected Shopify store:

• Synced contacts and their purchase history stay in your Craftify contacts until you delete them or close your account, the same as contacts you add yourself.
• Turning off contact sync, disconnecting the store, or uninstalling the app stops all new data. On disconnect or uninstall we delete the store's access token, and 48 hours after uninstall we delete the remaining store connection data.
• When a store's customer asks for their data to be erased and Shopify sends us that request, we delete that customer's contact if it came from Shopify. If the contact existed in Craftify before, we remove only the data Shopify provided (purchase history and Shopify fields). We act on these requests within 30 days.

You can request deletion of your data at any time. See "Your Rights" below.

7. Security

We take protecting your information seriously. We use a combination of technical, administrative, and physical safeguards designed to keep personal information secure and to prevent unauthorized access, use, or disclosure.

These safeguards include encrypted connections (HTTPS/TLS) when data is sent to and from our Service, encryption of stored data, role-based access controls that limit which team members can view customer data, activity monitoring, and routine review of our systems and vendors.

No method of transmission or storage is 100% secure, but we work to protect your information and review our security practices regularly, and we continue to improve our safeguards over time.

8. Your Rights

Depending on your location, you may have some or all of the following rights:

• Access: Ask for a copy of the personal information we hold about you.
• Correction: Ask us to fix or update inaccurate or incomplete information.
• Deletion: Ask us to delete your personal information.
• Restriction / pause processing: Ask us to limit how we use your information in certain cases.
• Portability: Ask for certain data in a machine-readable format so you can move it to another service.
• Object to marketing: Ask us to stop sending you marketing or promotional messages.
• Withdraw consent: If we're processing your data based on consent, you can withdraw that consent at any time.

Residents of certain regions (including California and the EU/EEA/UK) may have additional privacy rights under local law, including the right to object to certain types of processing and the right to contact a local regulator.

To exercise any of these rights, email contact@craftify.ai. We may need to verify your identity to protect your account.

9. International Data Transfers

Your information may be stored and processed in countries other than where you live. Our primary infrastructure is located in the United States. When we transfer personal information internationally, we take steps to protect it consistent with this Privacy Policy and applicable law.

10. Children's Privacy

Our Service is not directed to children under 18. We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact us at contact@craftify.ai and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the "Effective Date" at the top of this page. If we make material changes, we will provide additional notice (for example: by email or by a notice in the app) before the updated policy takes effect.

Your continued use of the Service after the updated policy becomes effective means you accept the changes.

12. Contact Us / Company Info

If you have questions about this Privacy Policy, our data practices, or your rights, please contact us: