CraftIQ · Legal

Privacy Policy

Effective date: 10 October 2026

This policy explains the categories of information that may be processed when you use CraftIQ, an AI-assisted marketing workspace. The exact information processed depends on the features you choose, the integrations you connect, and the configuration of your workspace.

1. Information involved in using CraftIQ

Depending on how you use the service, this may include account and identity information supplied through the authentication service; workspace, business, brand, campaign, audience, and content information you submit; prompts and AI-generated outputs; connected-platform data you authorize CraftIQ to access; and service, security, usage, and billing records needed to operate the features you use.

Do not submit passwords, payment-card details, sensitive personal information, or another person's information unless the relevant feature expressly requires it and you have a lawful basis to provide it.

2. How information is used

Information may be used to provide and maintain your workspace; authenticate users and enforce permissions; generate and manage marketing content; execute workflows you authorize; provide analytics and usage records; administer plans, credits, and payments; protect the service against abuse; troubleshoot incidents; and respond to support or legal requests.

3. AI features and external services

When you use an AI feature, relevant prompts, context, uploaded material, or other inputs may be sent to the model or service configured for that feature so it can return a result. Connected platforms and infrastructure providers may also process information when a feature depends on them. Those providers operate under their own terms and privacy practices.

Before connecting an external service or sending information to it, review the service's terms and privacy documentation and avoid including information you are not authorized to disclose. The data handling and retention rules of a particular provider may depend on the account, plan, and configuration in use.

4. Sharing and disclosure

Information may be processed by service providers that support authentication, hosting, AI generation, payments, communications, analytics, or integrations that you enable. Information may also be disclosed where required by law or where reasonably necessary to protect users, the service, or others. CraftIQ should only access connected third-party accounts within the permissions granted to it.

5. Storage, security, and retention

CraftIQ uses technical and organizational measures intended to protect information, but no online service can guarantee absolute security. Information may be retained for as long as needed to provide the service, maintain legitimate business and security records, resolve disputes, comply with legal obligations, or apply the retention settings of a connected provider. Exact retention periods depend on the feature and provider involved.

6. Your choices and requests

You should be able to manage workspace information and connected integrations through the controls made available in the product. You may also have rights to request access, correction, deletion, restriction, or a copy of personal information, depending on applicable law. Some records may need to be retained for security, contractual, or legal reasons.

A verified privacy-request contact and a complete self-service deletion process must be confirmed by the service operator before this policy is treated as final. Until then, do not assume that disconnecting an integration automatically deletes data already held by that provider.

7. Children

CraftIQ is a business-oriented service and is not designed for children who are not legally permitted to use it. Do not use the service to collect children's personal information unless you have confirmed that the use is lawful and appropriately protected.

8. Changes to this policy

This policy may be updated as the product, integrations, or legal requirements change. Material changes should be communicated through an appropriate product or website notice. The effective date at the top indicates when this version was prepared.

Before launch

This policy intentionally does not claim specific data-retention periods, training-use restrictions, legal jurisdiction, or a support email that has not been verified. The service operator must confirm the actual providers, retention/deletion behavior, business identity, and privacy-request contact before this page is approved as final legal copy.