Privacy Policy
Effective date: July 15, 2026
Krafie ("we," "us," "our") provides AI tools to create and edit images. This Privacy Policy explains what we collect, how we use it, and your choices. If you don't agree with this Policy, please don't use the Service.
Information we collect
Account info: email and password (stored securely by our authentication provider).
Content you provide: prompts, settings, and images/files you upload to generate or edit images.
Usage & billing: plan, tokens/credits used, subscription status (handled by our payment processor; we don't see full card numbers).
Device & logs: IP address, browser/OS, pages viewed, timestamps, and diagnostics.
Support: messages and screenshots you send us (including via Discord tickets).
How we use information
Provide the Service: sign you in, run your image tasks, track tokens, store your outputs (if you choose).
Improve & protect: fix bugs, monitor performance, prevent abuse and fraud.
Communicate: service emails (account, billing, changes) and product updates (you can unsubscribe).
Legal: comply with laws, enforce our Terms, and protect our rights.
AI processing
To fulfill your requests, your prompts and files may be sent to AI model services or models we host. These services may temporarily log data for reliability, security, and abuse prevention.
Training: We do not train our own models on your content unless you explicitly opt in.
Service providers & third parties we use
We don't sell your personal information for money. We share data with the following categories of providers, under contract, to run and improve the Service:
Infrastructure & product: Supabase (authentication and database), Vercel (hosting and Vercel Analytics), Cloudinary (image/video storage and delivery).
Payments: Stripe (subscriptions and payments; we don't see full card numbers).
AI model providers: Replicate, OpenAI, and similar services that process your prompts and files to generate outputs.
Communications & support: Resend (transactional email) and Discord (support tickets).
Anti-abuse: Google reCAPTCHA (bot protection at signup).
Advertising & analytics: Google Analytics 4, Meta (Facebook) Pixel and Conversions API, TikTok Pixel and Events API, and Rewardful (affiliate attribution). These help us understand usage and measure ad campaigns. To measure conversions, we may share identifiers such as a hashed email, your IP address, browser/user-agent, and purchase value with Meta and TikTok. Under some U.S. state laws (e.g., California's CPRA) this counts as "sharing" for cross-context behavioral advertising. See "Your choices: advertising & tracking" below to opt out.
Legal/compliance: when required by law or to protect our rights.
Business transfers: e.g., a merger or acquisition, with notice where required.
Cookies & tracking technologies
We use cookies and similar technologies in three categories:
Essential: required to keep you signed in, remember preferences, and secure the Service. These are always on.
Analytics: help us understand how the Service is used (e.g., Google Analytics, Vercel Analytics).
Advertising: used to measure and attribute ad campaigns (e.g., Meta Pixel, TikTok Pixel, Rewardful).
Analytics and advertising technologies are active by default. Standard browser settings allow cookies to be stored on your device, and continuing to use the Service without opting out is treated as consent to their use. Visitors in the European Economic Area, the United Kingdom, and Switzerland are shown a notice explaining this on their first visit. You can opt out at any time using Cookie Settings in the footer or under Advanced in Profile Settings, and if your browser sends the Global Privacy Control signal, we treat it as an opt-out and these trackers will not load. You can also control cookies in your browser; blocking some may affect the Service.
Your choices: advertising & tracking
Cookie Settings. Open Cookie Settings in the footer or under Advanced in Profile Settings to change your tracking choice at any time; changes take effect immediately. Trackers are on by default in all regions until you opt out.
Opt out of sharing. California and some other state residents can opt out of the "sharing" of personal information for cross-context behavioral advertising by choosing "Opt out" in Cookie Settings.
Global Privacy Control (GPC). We honor the GPC browser signal. If your browser sends GPC, we treat it as a valid request to opt out of advertising cookies and cross-context sharing, and advertising trackers will not load.
Data retention
We keep data as long as needed to provide the Service and meet legal obligations. You may delete content in your account or ask us to delete your data (see "Your rights").
Your rights
Depending on your location, you may request access, correction, deletion, portability, or object to/restrict certain processing. California residents have rights under the CPRA, including the right to opt out of the sharing of personal information for cross-context behavioral advertising (see "Your choices: advertising & tracking" above).
Self-service. Signed-in users can download a copy of their data ("Download my data") and permanently delete their account and associated data ("Delete account") from the Profile Settings page.
You can also exercise any of these rights by emailing info@patrykmarketer.com (we may verify your identity). We will not discriminate against you for exercising your rights.
Security
We use reasonable safeguards (encryption in transit, access controls, monitoring). No system is 100% secure—please keep your credentials safe.
International transfers
We're a U.S. company and use providers that may process data globally. Where required, we apply appropriate safeguards.
Children
The Service isn't directed to children under 13 (or the age of digital consent in your region). If a child's data was provided to us, contact us to remove it.
Changes
We may update this Policy from time to time. The "Effective date" shows the latest version. We'll notify you of material changes where required.
Contact
Questions or privacy requests: info@patrykmarketer.com
For Discord support tickets, include only info needed to troubleshoot; avoid sensitive data.

