CraftedTemplate

Privacy Policy

Last updated: September 27, 2025

This Privacy Policy explains how CraftedTemplate (“we,” “us,” “our”) collects, uses, and shares information when you use craftedtemplate.com and related services (“Service”). We operate from Canada and serve users globally.

1) Personal data we collect

You provide

  • Account: name, email, password (hashed), and optionally phone number for account security or 2FA/SMS notices.
  • Purchases: billing email, country/region, and details you share with support.
  • Communications: newsletter preferences (weekly), and messages you send us.

Automatically collected

  • Device/browser type, IP address, pages visited, timestamps, referring/exit pages.
  • Cookies/local storage for sign-in sessions, preferences, analytics, and performance.

From processors

  • Payments: Stripe (payment confirmations; we do not store full card numbers).
  • Email: Resend (email delivery and bounce/spam metrics).
  • Hosting/CMS/Analytics: Vercel, Sanity, and analytics providers (if enabled).

2) How we use personal data

  • Provide the Service (accounts, premium access, template delivery, customer support).
  • Process transactions, send receipts and download links.
  • Security and fraud prevention; protecting accounts and our Service.
  • Communications: service notices and (with your consent) a weekly newsletter with template updates. You can unsubscribe anytime.
  • Improve and personalize the Service; analytics and product development.
  • Legal compliance, including tax and accounting.

3) Lawful bases (GDPR/UK GDPR)

  • Contract: to deliver downloads and premium access you request.
  • Legitimate interests: to secure, improve, and market the Service (balanced against your rights).
  • Consent: for newsletters, some cookies/analytics, and any SMS marketing.
  • Legal obligation: tax, accounting, and compliance.

4) How we share data

We do not sell personal information. We share only as needed to operate the Service with trusted processors (Stripe, Vercel, Sanity, Resend, analytics). We may also share in connection with business transfers or to comply with law.

5) Marketing communications

We send product updates and a weekly newsletter if you opt in. Unsubscribe anytime using the link in any marketing email or by contacting support. If SMS is enabled, you can reply STOP to opt out (message/data rates may apply).

6) Cookies & tracking

We use cookies and similar technologies for authentication, preferences, analytics, and performance. Where required by law, we present a consent banner for non-essential cookies. You can manage cookies in your browser settings.

7) Data retention

  • Account data: retained while your account is active; deleted/anonymized upon request, subject to legal retention.
  • Transaction records: retained as required by tax/accounting law.
  • Marketing preferences: retained until you unsubscribe or delete your account.

8) International transfers

We may process data in Canada, the U.S., the EU/EEA, and other countries where our processors operate. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).

9) Security

We use reasonable technical and organizational measures (HTTPS, access controls, least-privilege, encryption in transit, secret rotation). No method is 100% secure; please use strong, unique passwords and enable 2FA when available.

10) Your rights

Depending on your location, you may have rights to access, correct, delete, or port your data; object to or restrict certain processing; and withdraw consent (e.g., newsletters). We will honor these rights in accordance with applicable laws.

California (CCPA/CPRA)

California residents can request to know, delete, or correct personal information and opt out of sale/sharing. We do not sell personal information or engage in cross-context behavioral advertising.

Canada (PIPEDA)

You may request access to personal information and challenge its accuracy/completeness. We will respond within applicable timeframes and provide reasons if an exception applies.

To exercise any rights, email privacy@craftedtemplate.com. We may need to verify your identity.

11) Children’s privacy

The Service is not directed to children under 13 (or the applicable digital consent age). We do not knowingly collect data from children without appropriate consent.

12) Data controller

13) Changes to this Policy

We may update this Policy periodically. Material changes will be noted here and, where appropriate, notified to you.

14) Contact

Privacy questions: privacy@craftedtemplate.com
General support: support@craftedtemplate.com