Privacy Policy

If you run the demo, our server reads the public homepage of the domain you entered and sends the result back to your browser. We do not keep it. Our server logs requests for security and debugging. There is no analytics running, no advertising pixel, and nothing that follows you to another site. That is the entire picture.

We do not ask for and do not want special category data — health, beliefs, biometrics or anything comparable. Please do not enter any of that into the site.

The people and companies shown in steps 2 to 6 of the demo are fictional samples on reserved .example domains. The demo does not look up or process real individuals.

• —Demo research: our legitimate interest in answering a request you made, limited to the public page of the domain you supplied.
• —Rate limiting and server logs: our legitimate interest in keeping the site up and not being abused.

• —No analytics provider. No page-view tracking of any kind at present.
• —No advertising or retargeting pixels.
• —No selling or sharing of personal data, and no sharing for cross-context behavioural advertising.
• —No profiling and no automated decision-making.
• —No non-essential cookies — see the cookie policy.

If analytics is added later, this page and the cookie policy are updated before it goes live, and it sits behind a consent gate that blocks it until you agree. Loading the script first and asking afterwards is the common version of this, and it is not lawful.

Our hosting provider processes traffic so it can serve the site, and holds the server logs described above. Fonts are served from our own domain, not from a font provider.

The website you enter sees one request from our server, identified as CraftReachBot. During the demo your browser also loads that site's icon directly from it, so that site sees your browser's request the same way it would if you visited it.

Nobody else. There is no CRM, no marketing automation platform and no enrichment service in the path. We will disclose data where the law compels us, and would tell you unless legally prevented.

• —A copy of what we hold about you.
• —Correction of anything inaccurate.
• —Deletion, unless we have an overriding legal reason to keep it.
• —A machine-readable export.
• —Withdrawal of consent at any time, without affecting anything lawful done before that.
• —Objection to processing based on legitimate interests.
• —Nomination of someone to exercise these rights for you, under the DPDP Act.

Email support@craftitstudios.com. We acknowledge within 5 working days and respond properly within 30 days. If something will take longer we will tell you before the 30 days is up, not after.

Abhishek Jha handles data queries and is the contact point under the DPDP Act, at founder@craftitstudios.com.

If we have not dealt with something properly you can complain to the Data Protection Board of India, or your own supervisory authority if you are in the EEA or the UK. We would rather you came to us first, but we will not get in your way.

This is a business service, not directed at children, and we do not knowingly collect data from anyone under 18. If we find that we have, we delete it.

If a breach affects your data and creates a risk to you, we will tell you and notify the relevant authority within the time the applicable law requires — 72 hours under GDPR, and as prescribed under the DPDP Act.

Questions go to support@craftitstudios.com. We answer them.