Privacy Policy

This Privacy Policy explains how PostCraft ("we", "us", "our") collects, uses, and protects your information when you use our service.

By using PostCraft, you agree to the practices described here. If you do not agree, please do not use the service.

01Information we collect

We collect the minimum information needed to run the service:

• Account information — your email address and authentication details, handled through our authentication provider (Supabase). If you sign in with Google, we receive your email address and basic profile information from Google.
• Content you submit — the text, drafts, and prompts you enter to generate copy or images.
• Generated content — the copy and images PostCraft produces for you, along with your generation history. Generated history images are stored in private object storage and delivered through time-limited links.
• Usage and feedback data — generation counts used to enforce plan limits, plus feedback messages and delivery status when you contact us through the app.
• Payment information — if you subscribe, payments are processed by Stripe. We do not store your card numbers; Stripe handles them directly.

02How we use your information

• To provide the core service — generating platform-native copy and images from your input.
• To authenticate you and keep your account secure.
• To track usage against your plan limits (Free or Pro).
• To process subscription payments and manage your billing.
• To save your generation history so you can revisit and reuse it.
• To respond to feedback or support requests you send us.

03Third-party services

To deliver PostCraft, we share necessary data with these providers:

• Supabase — authentication and database (stores your account, history, and usage).
• Stripe — subscription payment processing.
• Anthropic (Claude), OpenAI, and Google (Gemini) — the AI models that generate your copy and images. The content you submit is sent to these providers to produce a result.
• Vercel — hosting and serverless functions.
• Resend — sending feedback emails to us.

04Data retention

We keep your account information while your account is active. In-app generation history is limited to the most recent 50 items per account; older history rows and their stored images are removed as new items are saved. If you delete your account, we remove your associated personal data, subject to obligations to retain records such as legally required payment records.

05Your rights

• Access the personal information we hold about you.
• Request correction or deletion of your data.
• Cancel your subscription at any time through the billing portal.
• Withdraw consent by ceasing to use the service and requesting account deletion.

To exercise any of these rights, contact us at the email below.

06Security

We take reasonable measures to protect your data. Authentication is handled by Supabase, payments by Stripe, and API keys are kept server-side and never exposed to your browser. No method of transmission or storage is perfectly secure, but we work to protect your information.

07Children's privacy

PostCraft is not intended for users under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children.

08Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the service after changes means you accept the updated policy.

09Contact

If you have questions about this Privacy Policy or your data, contact us at postcraftadmin@post-craft-lilac.vercel.app.