Privacy Policy

Account info: email and password (stored securely by our authentication provider).

Content you provide: prompts, settings, and images/files you upload to generate or edit images.

Usage & billing: plan, tokens/credits used, subscription status (handled by our payment processor; we don't see full card numbers).

Device & logs: IP address, browser/OS, pages viewed, timestamps, and diagnostics.

Support: messages and screenshots you send us (including via Discord tickets).

Connected Etsy accounts: if you choose to connect an Etsy shop, we receive the shop, listing, order, transaction, payment, and sales information you authorize Etsy to provide, along with OAuth access and refresh tokens needed to maintain the connection. We never receive your Etsy password. The initial integration does not request buyer-email or address access.

Connected Pinterest accounts: if you choose to connect Pinterest, we receive the Pinterest profile and account identifiers, boards, Pins, and organic performance information that you authorize Pinterest to provide. We also receive OAuth access and refresh tokens needed to maintain the connection. We never receive your Pinterest password.

Provide the Service: sign you in, run your image tasks, track tokens, store your outputs (if you choose).

Market research: where permitted by the applicable provider, combine non-personal, aggregated trend information with marketplace data to calculate keyword opportunity, seasonality, and forecast signals.

Improve & protect: fix bugs, monitor performance, prevent abuse and fraud.

Communicate: service emails (account, billing, changes) and product updates (you can unsubscribe).

Legal: comply with laws, enforce our Terms, and protect our rights.

How we use Etsy information: we use authorized shop and listing information to provide seller-directed listing tools, such as preparing a draft listing from content the seller owns, displaying the draft for review, and creating or updating the listing after the seller explicitly confirms the action. We use authorized order, transaction, payment, and sales information to display private reports for the connected shop.

Minimum access: Krafie requests only the OAuth permissions needed for listing management and read-only sales reporting. The initial integration does not request buyer-email or address access, send email, or update receipts and transactions.

No passwords, scraping, or model training: we access connected-account information through Etsy's authorized API, never ask for an Etsy password, and do not use Etsy member or listing information to train artificial intelligence models.

Retention and disconnecting: listing information displayed from Etsy is refreshed or removed in accordance with Etsy's API terms. A seller may disconnect Etsy at any time, after which Krafie revokes future access and deletes the associated access and refresh tokens, subject to limited security or legal records.

How we use Pinterest information: we use connected-account information only to provide features you request, such as displaying your boards and your own Pin performance, preparing a Pin from content you provide or control, and publishing a Pin after you select the content and destination board and explicitly confirm the action. Where Pinterest has authorized the use, Krafie may also process non-personal, aggregated Pinterest Trends information live to improve market-research signals.

No scraping or surprise publishing: we access Pinterest through its authorized API and do not ask for your Pinterest password. We do not publish, edit, or delete Pinterest content without your direction.

No sale, account pooling, or model training: we do not sell Pinterest information, pool one user's connected-account information with another user's information, or use it to train or improve artificial intelligence models. General trend information is combined with marketplace data only where contractually permitted. We do not send raw Pinterest API information to AI model providers unless both Pinterest and the affected user have authorized that use.

Disconnecting: you may disconnect Pinterest through your Krafie account settings when the connection feature is available, or by contacting us. Disconnecting revokes Krafie's future access and we delete the associated Pinterest access and refresh tokens, subject to limited records we must retain for security or legal compliance.

To fulfill your requests, your prompts and files may be sent to AI model services or models we host. These services may temporarily log data for reliability, security, and abuse prevention.

Training: We do not train our own models on your content unless you explicitly opt in.

We don't sell your personal information for money. We share data with the following categories of providers, under contract, to run and improve the Service:

Infrastructure & product: Supabase (authentication and database), Vercel (hosting and Vercel Analytics), Cloudinary (image/video storage and delivery).

Payments: Stripe (subscriptions and payments; we don't see full card numbers).

AI model providers: Replicate, OpenAI, and similar services that process your prompts and files to generate outputs.

Communications & support: Resend (transactional email) and Discord (support tickets).

Anti-abuse: Google reCAPTCHA (bot protection at signup).

User-authorized integrations and trend providers: Etsy, when you choose to connect your shop for seller-directed listing tools; and Pinterest, when you choose to connect your Pinterest account so Krafie can provide the connected features described above and, where authorized, live aggregated trend analysis.

Advertising & analytics: Google Analytics 4, Meta (Facebook) Pixel and Conversions API, TikTok Pixel and Events API, and Rewardful (affiliate attribution). These help us understand usage and measure ad campaigns. To measure conversions, we may share identifiers such as a hashed email, your IP address, browser/user-agent, and purchase value with Meta and TikTok. Under some U.S. state laws (e.g., California's CPRA) this counts as "sharing" for cross-context behavioral advertising. See "Your choices: advertising & tracking" below to opt out.

Legal/compliance: when required by law or to protect our rights.

Business transfers: e.g., a merger or acquisition, with notice where required.

We use cookies and similar technologies in three categories:

Essential: required to keep you signed in, remember preferences, and secure the Service. These are always on.

Analytics: help us understand how the Service is used (e.g., Google Analytics, Vercel Analytics).

Advertising: used to measure and attribute ad campaigns (e.g., Meta Pixel, TikTok Pixel, Rewardful).

Analytics and advertising technologies are active by default. Standard browser settings allow cookies to be stored on your device, and continuing to use the Service without opting out is treated as consent to their use. Visitors in the European Economic Area, the United Kingdom, and Switzerland are shown a notice explaining this on their first visit. You can opt out at any time using Cookie Settings in the footer or under Advanced in Profile Settings, and if your browser sends the Global Privacy Control signal, we treat it as an opt-out and these trackers will not load. You can also control cookies in your browser; blocking some may affect the Service.

Cookie Settings. Open Cookie Settings in the footer or under Advanced in Profile Settings to change your tracking choice at any time; changes take effect immediately. Trackers are on by default in all regions until you opt out.

Opt out of sharing. California and some other state residents can opt out of the "sharing" of personal information for cross-context behavioral advertising by choosing "Opt out" in Cookie Settings.

Global Privacy Control (GPC). We honor the GPC browser signal. If your browser sends GPC, we treat it as a valid request to opt out of advertising cookies and cross-context sharing, and advertising trackers will not load.

Depending on your location, you may request access, correction, deletion, portability, or object to/restrict certain processing. California residents have rights under the CPRA, including the right to opt out of the sharing of personal information for cross-context behavioral advertising (see "Your choices: advertising & tracking" above).

Self-service. Signed-in users can download a copy of their data ("Download my data") and permanently delete their account and associated data ("Delete account") from the Profile Settings page.

You can also exercise any of these rights by emailing info@patrykmarketer.com (we may verify your identity). We will not discriminate against you for exercising your rights.

Questions or privacy requests: info@patrykmarketer.com

For Discord support tickets, include only info needed to troubleshoot; avoid sensitive data.