Privacy Policy

1. Information We Collect

When purchasing a digital asset or reaching out to customer support, we collect only the minimal information required to deliver your goods and fulfill legal tax obligations:

• Contact Information: Customer email address and name for digital file delivery and receipt generation.
• Transaction Records: Order timestamp, purchased item IDs, and transaction identifiers. We never see, store, or process raw credit card numbers.
• Support Inquiries: Messages, logs, or defect reports submitted through our support portal.

2. Payment Processing & Third-Party Services

Payment processing is handled entirely by our authorized Merchant of Record, Creem. Creem manages cryptographic tokenization, fraud prevention, and regional sales tax compliance under PCI-DSS Level 1 security standards.

3. Cryptographic Security & Data Storage

All traffic between your browser and CraftKits is encrypted using TLS 1.3 / HTTPS. We do not sell, rent, monetize, or disclose your personal information or email addresses to third-party data brokers or marketing platforms.

4. GDPR & CCPA Rights

Under European (GDPR) and California (CCPA) privacy regulations, you have the right to request access to your stored transaction data, request data rectification, or request complete account erasure ("Right to be Forgotten"). To exercise any privacy rights, contact our Data Protection representative at [email protected].