Privacy Policy

Account info: email and password (stored securely by our authentication provider).

Content you provide: prompts, settings, and images/files you upload to generate or edit images.

Usage & billing: plan, tokens/credits used, subscription status (handled by our payment processor; we don't see full card numbers).

Device & logs: IP address, browser/OS, pages viewed, timestamps, and diagnostics.

Support: messages and screenshots you send us (including via Discord tickets).

Connected Etsy accounts: the Etsy integration is in private development and is not available to customers. When an authorized connection is enabled, Etsy can provide shop, listing, order, transaction, payment, and sales information, together with OAuth access and refresh tokens. We never receive your Etsy password. Separate buyer-email access and the address permission are outside the requested scope, but order responses can still contain buyer or shipping information.

Connected Pinterest accounts: if you choose to connect Pinterest, we receive the Pinterest profile and account identifiers, boards, Pins, and organic performance information that you authorize Pinterest to provide. We also receive OAuth access and refresh tokens needed to maintain the connection. We never receive your Pinterest password.

Provide the Service: sign you in, run your image tasks, track tokens, store your outputs (if you choose).

Market research: where permitted by the applicable provider, combine non-personal, aggregated trend information with marketplace data to calculate keyword opportunity, seasonality, and forecast signals.

Improve & protect: fix bugs, monitor performance, prevent abuse and fraud.

Communicate: service emails (account, billing, changes) and product updates (you can unsubscribe).

Legal: comply with laws, enforce our Terms, and protect our rights.

Availability and purpose: Krafie has a registered Etsy app with Personal Access and a deployed Shop Manager for private owner testing. The owner's shop has been connected and listing reads verified. Customer access remains unavailable and Commercial Access has not been approved. The intended customer integration includes a private dashboard of the connected seller's own sales, recommendations to improve their listings and shop based on their own shop data, and preparation, review, and publishing of listings; the requested analytics and optional AI features remain subject to authorization, implementation, and testing.

Listing and sales information: authorized shop and listing information will support seller-directed draft creation, editing, and publishing after explicit confirmation. The requested sales dashboard and recommendations use selected order and item fields, such as dates, amounts, currency, quantities, and payment or refund status, alongside the connected seller's listings. Buyer or shipping details are not needed for these reports or recommendations and must not be used for marketing.

Minimum access: the requested OAuth scope covers listing management and read-only shop and sales records. It excludes separate buyer-email access, the address permission, sending email, and updating receipts or transactions. Excluding those permissions does not guarantee that every order response is free of personal information.

API access and AI processing: connected-account access will use Etsy's official API within the approved purpose, without asking for an Etsy password. Etsy-sourced analytics and any proposed AI assistance for recommendations based on the connected seller's own shop data will be enabled only with the applicable Etsy authorization and seller permission. Before enabling such AI processing, Krafie will disclose the processor and information involved. Etsy member or listing information will not be used to train artificial intelligence models.

Retention and disconnecting: displayed Etsy information must be refreshed or removed within Etsy's required periods and retained only as needed for the authorized service. When the connection is available, disconnecting will stop future access through Krafie and delete the associated access and refresh tokens, subject to limited security or legal records. You can also revoke the app's access in Etsy. Disconnecting is separate from requesting deletion of previously received data; contact us using the details below for deletion requests.

How we use Pinterest information: we use connected-account information only to provide features you request, such as displaying your boards and your own Pin performance, preparing a Pin from content you provide or control, and publishing a Pin after you select the content and destination board and explicitly confirm the action. Where Pinterest has authorized the use, Krafie may also process non-personal, aggregated Pinterest Trends information live to improve market-research signals.

No scraping or surprise publishing: we access Pinterest through its authorized API and do not ask for your Pinterest password. We do not publish, edit, or delete Pinterest content without your direction.

No sale, account pooling, or model training: we do not sell Pinterest information, pool one user's connected-account information with another user's information, or use it to train or improve artificial intelligence models. General trend information is combined with marketplace data only where contractually permitted. We do not send raw Pinterest API information to AI model providers unless both Pinterest and the affected user have authorized that use.

Disconnecting: you may disconnect Pinterest through your Krafie account settings when the connection feature is available, or by contacting us. Disconnecting revokes Krafie's future access and we delete the associated Pinterest access and refresh tokens, subject to limited records we must retain for security or legal compliance.

To fulfill your requests, your prompts and files may be sent to AI model services or models we host. These services may temporarily log data for reliability, security, and abuse prevention.

Training: We do not train our own models on your content unless you explicitly opt in.

We don't sell your personal information for money. We share data with the following categories of providers, under contract, to run and improve the Service:

Infrastructure & product: Supabase (authentication and database), Vercel (hosting and Vercel Analytics), Cloudinary (image/video storage and delivery).

Payments: Stripe (subscriptions and payments; we don't see full card numbers).

AI model providers: Replicate, OpenAI, and similar services that process your prompts and files to generate outputs.

Communications & support: Resend (transactional email) and Discord (support tickets).

Anti-abuse: Google reCAPTCHA (bot protection at signup).

User-authorized integrations and trend providers: Etsy, for the connected-shop analysis and listing tools described above when authorized and available; and Pinterest, when you choose to connect your Pinterest account so Krafie can provide the connected features described above and, where authorized, live aggregated trend analysis. Listing an AI provider in this policy does not authorize sending Etsy-sourced information to that provider.

Advertising & analytics: Google Analytics 4, Meta (Facebook) Pixel and Conversions API, TikTok Pixel and Events API, and Rewardful (affiliate attribution). These help us understand usage and measure ad campaigns. To measure conversions, we may share identifiers such as a hashed email, your IP address, browser/user-agent, and purchase value with Meta and TikTok. Under some U.S. state laws (e.g., California's CPRA) this counts as "sharing" for cross-context behavioral advertising. See "Your choices: advertising & tracking" below to opt out.

Legal/compliance: when required by law or to protect our rights.

Business transfers: e.g., a merger or acquisition, with notice where required.

We use cookies and similar technologies in three categories:

Essential: required to keep you signed in, remember preferences, and secure the Service. These are always on.

Analytics: help us understand how the Service is used (e.g., Google Analytics, Vercel Analytics).

Advertising: used to measure and attribute ad campaigns (e.g., Meta Pixel, TikTok Pixel, Rewardful).

Analytics and advertising technologies are active by default. Standard browser settings allow cookies to be stored on your device, and continuing to use the Service without opting out is treated as consent to their use. Visitors in the European Economic Area, the United Kingdom, and Switzerland are shown a notice explaining this on their first visit. You can opt out at any time using Cookie Settings in the footer or under Advanced in Profile Settings, and if your browser sends the Global Privacy Control signal, we treat it as an opt-out and these trackers will not load. You can also control cookies in your browser; blocking some may affect the Service.

Cookie Settings. Open Cookie Settings in the footer or under Advanced in Profile Settings to change your tracking choice at any time; changes take effect immediately. Trackers are on by default in all regions until you opt out.

Opt out of sharing. California and some other state residents can opt out of the "sharing" of personal information for cross-context behavioral advertising by choosing "Opt out" in Cookie Settings.

Global Privacy Control (GPC). We honor the GPC browser signal. If your browser sends GPC, we treat it as a valid request to opt out of advertising cookies and cross-context sharing, and advertising trackers will not load.

Depending on your location, you may request access, correction, deletion, portability, or object to/restrict certain processing. California residents have rights under the CPRA, including the right to opt out of the sharing of personal information for cross-context behavioral advertising (see "Your choices: advertising & tracking" above).

Self-service. Signed-in users can download a copy of their data ("Download my data") and permanently delete their account and associated data ("Delete account") from the Profile Settings page.

You can also exercise any of these rights by emailing info@patrykmarketer.com (we may verify your identity). We will not discriminate against you for exercising your rights.

Questions or privacy requests: info@patrykmarketer.com

For Discord support tickets, include only info needed to troubleshoot; avoid sensitive data.