Privacy Policy

1. Overview

This Privacy Policy explains what data RawCraft collects, why, and who we share it with. It applies to your use of the RawCraft Service.

RawCraft is operated by Muhammet Sinan Coşkun, a sole proprietor registered in Türkiye at Girne Mahallesi, Çiftlikli Sokak No: 8 D: 10, 34852 Maltepe / İstanbul, Türkiye, who is the data controller for the personal data described in this policy. Questions and data requests can be sent to info@rawcraft.ai.

2. Data We Collect

Account data: your email address and authentication details when you sign up or sign in.

Usage data: the prompts and settings you submit for generation, and the resulting output, are stored so you can view your own history and so we can investigate abuse reports or payment disputes.

Payment data: when you subscribe or purchase credits, our payment processor (Creem, see below) handles your payment details directly — RawCraft does not store your card number.

Generated media: images and video you generate are stored so you can access them from your history.

3. Who We Share Data With

We share data with the following processors, each for a specific purpose:

• Supabase — our database, authentication, and file storage provider. Hosts your account data, generation history, and generated media.

• fal.ai — our AI model inference provider. Receives the prompts and reference images you submit in order to generate output.

• Creem — our payment processor and Merchant of Record. Handles checkout, billing, and payment-related support.

• PostHog — our product analytics provider. Receives anonymized product usage events; we do not send your email address, prompt text, or generated content to PostHog.

• Resend — our transactional and operational email provider. Sending is processed from the eu-west-1 (Ireland) region; account data and mail logs associated with our Resend account are held in the United States.

We do not sell your personal data.

4. Data Retention

Generated images and video are retained for 30 days from creation, after which they are deleted from our storage. You can delete individual items from your history at any time before then.

Account data is retained for as long as your account is active. Records of legal consents (such as age and Terms acceptance) are retained as required to demonstrate compliance.

5. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact us — see below.

6. Analytics and Local Storage

We use analytics tools (including PostHog and Google Analytics) to understand product usage in aggregate. These tools are not loaded, and no analytics or advertising cookies are set, until you accept tracking in the cookie banner shown on your first visit. If you decline, none of these tools load and no such cookies are written.

Your accept/decline choice itself is remembered in a strictly necessary cookie (not a tracking cookie) for 6 months, so we do not ask again on every visit; after 6 months you will be asked again. This cookie does not require consent because it is essential to operating the consent banner itself.

Certain other features of the Service (such as remembering your age confirmation) may use browser local storage independently of analytics consent.

7. Security

We use industry-standard measures — including encryption in transit, access controls, and row-level security on our database — to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

8. Children’s Privacy

RawCraft is not directed at, and must not be used by, anyone under 18. We do not knowingly collect data from anyone under 18.

9. International Data Transfers

Our service providers operate in multiple countries, including the United States and the European Union. Where we transfer personal data across borders, we rely on the safeguards provided by our processors’ own compliance frameworks.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify active users.

11. Contact

Questions about this Privacy Policy, or requests regarding your data, can be sent to info@rawcraft.ai.