Privacy Policy

Effective Date: May 17, 2024

Craftbench, Inc. ("Craftbench," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your Personal Data when you visit www.craftbench.ai (including all sub‑domains, the "Website") and when you use our software‑as‑a‑service platform (the "Service").

By accessing or using the Website or Service, you agree to the practices described in this Privacy Policy.

1. Introduction

We are committed to protecting your privacy and ensuring the security of your Personal Data. Please read this Policy carefully to understand the ways in which we handle your information and the choices you have.

2. Scope and Applicability

This Policy applies to Personal Data collected:

• Through the Website and Service.
• In email, text, and other electronic messages between you and Craftbench.
• In any other interaction you have with us (e.g., customer support).

It does not apply to data collected by third‑party websites or services that may link to or be accessible from our Service.

3. Definitions

4. Information We Collect

We collect several categories of information:

We collect information directly from you, automatically from your device, and from third‑party sources (e.g., analytics providers or payment processors).

5. How We Use Your Information

We use Personal Data to:

1. Provide & Maintain the Service – create accounts, authenticate users, process payments, and deliver customer support.
2. Communicate – send transactional notices, respond to inquiries, and deliver important Service updates.
3. Personalize & Improve – tailor content, remember preferences, and analyse usage to enhance functionality.
4. Marketing (with consent) – send newsletters, product announcements, and promotional offers.
5. Analytics & Research – understand trends, measure performance, and develop new features.
6. Security & Fraud Prevention – detect, investigate, and prevent fraudulent or unauthorized activity.
7. Legal Compliance – satisfy legal, regulatory, or contractual obligations.

6. Legal Bases for Processing (EEA/UK Users)

Where the GDPR applies, we rely on one of the following grounds:

• Contractual Necessity – to perform our contract with you (e.g., provide the Service).
• Legitimate Interests – to improve our Service, market to existing customers, and protect security (balanced against your rights).
• Consent – for specific activities such as optional marketing emails.
• Legal Obligation – to comply with laws (e.g., taxation, accounting, KYC).

7. Data Retention

We retain Personal Data only as long as necessary for the purposes described above or as required by law. Criteria include:

• The length of your subscription or account activity.
• Legal/contractual retention requirements.
• The necessity of data for dispute resolution or security. When retention ends, we either delete or anonymise the data.

8. Your Privacy Rights

Subject to local law, you may have the right to:

• Access – obtain a copy of the Personal Data we hold about you.
• Rectify – correct inaccurate or incomplete data.
• Erase – request deletion of your data (with certain exceptions).
• Restrict – limit how we process your data.
• Portability – receive your data in a structured, machine‑readable format.
• Object – object to processing based on legitimate interests or direct marketing.

To exercise any right, email hello@craftbench.ai. We will respond within a reasonable timeframe.

9. International Data Transfers

We are based in the United States and use service providers in multiple countries. When transferring Personal Data internationally, we rely on:

• Standard Contractual Clauses approved by the European Commission or UK ICO.
• Adequacy decisions, where applicable.
• Other lawful transfer mechanisms under GDPR.

10. Security Measures

We implement administrative, technical, and physical safeguards such as:

• TLS/HTTPS encryption in transit.
• AES‑256 encryption for sensitive data at rest.
• Role‑based access controls and least‑privilege principles.
• Regular vulnerability scanning and third‑party security audits.

Despite these measures, no Internet transmission or storage system is guaranteed 100 % secure.

11. Marketing Communications

You may opt out of marketing emails at any time by clicking “Unsubscribe” in the message or contacting hello@craftbench.ai. Transactional or service‑related communications will still be sent.

12. Sharing of Information

We may share Personal Data with:

We never sell your Personal Data.

13. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect Personal Data from children. If you believe we have, please contact us so we can delete the information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email or prominent notice on the Website at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

15. GDPR Compliance Statement

Craftbench processes EEA, Swiss, and UK Personal Data in compliance with the GDPR, including lawful bases for processing, users’ rights, data‑transfer mechanisms, and appropriate technical and organisational safeguards.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, contact:

Craftbench, Inc.
1111b South Governors Avenue
Dover, DE 19904, USA
Email: hello@craftbench.ai

Last updated: May 17, 2024