Introduction
At Clickraft, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered visual content creation platform at clickraft.ai.
By using Clickraft, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our service.
Clickraft is a product of Kumizz Ltd., an Israeli company ("Company", "we", "us", or "our").
Information We Collect
Personal Information: We collect information you provide directly, including:
- Email address (required for account creation)
- Name and profile picture (optional)
- Payment information (processed securely by our payment providers)
Usage Data: We automatically collect:
- Log data (IP address, browser type, pages visited)
- Device information (device type, operating system)
- Usage patterns and feature interactions
- Generation history and preferences
Content Data: Content you create includes:
- Images you upload to the platform
- AI-generated images and videos created through our service
- Prompts and instructions you provide
- Templates and workflows you create
How We Use Your Data
We use the information we collect to:
- Provide, maintain, and improve our services
- Process your transactions and manage your subscription
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions and abuse
- Personalize and improve your experience
We do not sell your personal information. We only share data as described in this policy or with your explicit consent.
Legal Basis for Processing:
- Contract Performance: Providing the service, processing transactions, managing subscriptions
- Legitimate Interests: Analytics, fraud prevention, service improvement, platform security
- Consent: Marketing communications and optional analytics cookies
- Legal Obligation: Tax records, compliance with law enforcement requests
Data Sharing
We work with trusted third-party services to provide our platform:
Authentication & Database
We use BetterAuth for authentication and Google Cloud SQL (PostgreSQL) for secure database services. Your account data is stored with industry-standard encryption.
AI Processing
Your prompts and reference images are processed by AI providers including Google AI (Vertex AI), OpenAI, Fal.ai, Runway, and others to generate content. These providers have their own privacy policies governing data handling.
Payment Processing
We use Stripe and Polar for payment processing. We do not store your full credit card details on our servers.
Analytics & Monitoring
We use PostHog (EU-hosted) for product analytics, Google Tag Manager for tag management, and Sentry for error monitoring. Analytics data is collected in anonymized form to improve our services.
Email Communications
We use Resend for transactional emails including password resets, team invitations, and subscription notifications.
Infrastructure
Google Cloud Platform (hosting, database, storage), Cloudflare (collaboration, CDN, object storage), Inngest (background job processing), and Upstash (rate limiting).
A current list of sub-processors is maintained above. We will update this policy when adding new sub-processors that handle personal data.
We may also share information when required by law, to protect our rights, or in connection with a business transfer or merger.
Data Storage & Security
Storage Location: Your data is stored on Google Cloud Platform infrastructure. We use industry-standard security measures including encryption at rest and in transit.
Data Retention:
- Account data: Retained while active + 30 days after deletion request
- Generation history: Retained while account is active
- Payment records: Retained for 7 years (tax/legal requirements)
- Analytics data: Anonymized and retained for up to 24 months
- Server logs: Retained for up to 90 days
International Data Transfers: Your data may be transferred to and processed in countries outside your country of residence, including the United States (for AI processing and certain infrastructure services). These transfers are protected by Israel's EU adequacy decision, Standard Contractual Clauses (SCCs) where applicable, and vendor-specific data protection agreements. Contact [email protected] for more information about transfer safeguards.
Your Rights
Depending on your location, you may have the following rights regarding your data:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data
- Portability: Request transfer of your data in a machine-readable format
- Objection: Object to processing of your data
- Restrict Processing: Request that we limit how we use your personal data
- Withdraw Consent: Withdraw consent at any time where processing is based on consent
GDPR (EEA, UK, Switzerland)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the rights listed above under the General Data Protection Regulation. To exercise these rights, contact us at [email protected].
CCPA/CPRA (California)
If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of your personal information. Note: Clickraft does not sell your personal information to third parties.
We will respond to verified data rights requests within 30 days. For complex requests, we may extend by an additional 60 days with prior notice.
Children's Privacy
Clickraft is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes:
- We will update the "Last Updated" date at the top of this policy
- For material changes, we will provide notice via email or prominent posting on the Platform
- Your continued use of the Platform after changes constitutes acceptance of the updated policy
Contact
If you have any questions about this Privacy Policy or want to exercise your rights, please contact us.
We will respond to data requests within 30 days as required by applicable law.