Privacy Policy

BizCraftly is operated as a sole proprietorship by [PROPRIETOR LEGAL NAME], at [OPERATING ADDRESS]. For any privacy question, email security@bizcraftly.com.

Account information. Your email address and a username, plus anything you choose to add to your profile: first and last name, profile picture, short bio, phone number, country and time zone. Your password is stored only as a cryptographic hash — we cannot read it.

Files you upload. The documents and images you upload, and the results the tools produce from them.

Security and sign-in records. To let you review account activity and to detect suspicious access, we record sign-in attempts with the IP address, browser/device description and approximate location derived from the request.

Usage records. Which tools you ran and when, so we can apply plan limits and show you your history.

Payment records. If you subscribe, we store the subscription status, plan, seat count, amounts and the payment provider's reference. We do not receive or store your card number, CVV, UPI PIN or bank credentials — those are entered on Razorpay's checkout.

Using tools without an account. A random identifier is generated in your browser to keep your own files separate from other visitors'. Your IP address is used to count runs against the daily free limit. Neither identifies you personally.

• To provide the service — running the tool you asked for and storing the result in your vault.
• To create and secure your account, verify your email address and let you reset a password.
• To apply plan limits and, for paid plans, to bill the correct amount.
• To send service messages: verification, password resets and security notices.
• To protect the service against abuse, malware and unauthorised access.
• To respond when you contact support.

We do not use your personal information for advertising, we do not sell it, and we do not use your files to train AI models.

BizCraftly uses cookies only to make the service work. There are no analytics, advertising or tracking cookies on this site, and no third-party tracking scripts.

Cookies we set: a pair of sign-in cookies holding your session, set as HttpOnly so browser scripts cannot read them, and a security token used to protect form submissions. These are necessary to keep you signed in.

Stored in your browser, not sent to us: your light/dark theme preference, a list of recently used tools, any signature you save for reuse, and the random identifier described above. You can clear these at any time through your browser.

We use the following providers to run the service. Each receives only what it needs for its purpose.

Some of these providers operate outside India, so your information may be processed abroad when you use those features.

• Files uploaded without an account are deleted automatically about 2 hours after upload.
• Files in your vault are kept until you delete them or close your account.
• Items you move to Trash are permanently deleted after 30 days.
• Account, billing and sign-in records are kept while your account is open, and afterwards only where we must for legal or tax reasons.
• Contact-form messages are kept so we can follow up and keep a record of the conversation.

Measures in place include:

• Encrypted connections (HTTPS/TLS) for traffic between your browser, our servers and our storage provider.
• Passwords stored only as salted cryptographic hashes.
• Sign-in tokens held in HttpOnly cookies, which browser scripts cannot read, with rotating refresh tokens.
• Access controls so one account cannot reach another account's files, including on shared links.
• Automated malware scanning of uploads where enabled.
• Email alerts to you when notable security events happen on your account.

No online service can promise perfect security, and we do not claim to. We hold no third-party security certification at this time; if that changes we will say so here rather than imply it.

• Access and correct — view and edit your profile in your account settings.
• Export — download any file you have stored, at any time.
• Delete — remove individual files, or delete your entire account from account settings. Account deletion is permanent and removes your account and its contents.
• Sign-in activity — review recent sign-ins and revoke other sessions from your account settings.
• Object or ask a question — email us and we will respond.

To exercise any of these, use your account settings or email security@bizcraftly.com.

BizCraftly is not directed at children under 18 and we do not knowingly collect their information. If you believe a child has given us personal information, email security@bizcraftly.com and we will delete it.

We may update this policy as the service changes. The current version is always on this page with the date it was last updated at the top. If a change materially affects how we handle your information, we will make that clear rather than change the text quietly.

Privacy and security: security@bizcraftly.com
Everything else: support@bizcraftly.com or the contact page.