Last updated September 13, 2026

Privacy Policy

This policy explains what Crafio collects when you use the product, why we collect it, and the choices you have.

Crafio is a backend and hosted admin for apps people build with AI. This policy covers the Crafio website, dashboard, and API. It does not replace the privacy practices of the customer apps you build on Crafio. Those apps have their own operators.

Who this applies to

  • Team users. People who sign in with Clerk to manage projects.
  • People. Customers of an app who sign in through Crafio Auth. Their data is stored in that project and controlled by the project owner.
  • Visitors. People who browse the marketing site or docs.

What we collect

  • Account details from Clerk: name, email, and authentication metadata.
  • Project content you or an agent write: collections, records, files, and settings.
  • Tenant user records created for a customer app (email and/or username, name).
  • Integration credentials you choose to store (Stripe, email, CRM). Agents cannot read these secrets.
  • Audit logs of actions in a project (who did what, and when).
  • Optional product analytics via PostHog if that key is configured. See the Cookie Policy.

How we use it

  • To provide the workspace, API, and MCP tools you asked for.
  • To authenticate team members and tenant users.
  • To show activity, send transactional email you trigger, and process payments through your Stripe.
  • To keep the service secure, debug issues, and meet legal obligations.

Sharing

We do not sell personal data. We share it with processors who help us run Crafio (for example Clerk for team sign-in, and the email/payment/CRM providers you connect). Project data is isolated per project. A token for one project cannot access another.

Your choices

Team users can update their Clerk profile, invite or remove teammates, and delete project data they control. Project owners can export or delete records and revoke agent tokens. For access, correction, or deletion requests, email [email protected].

Retention

We keep account and project data while the project exists, and audit logs as needed to operate the service. Deleted files and records are removed from the live workspace. Backups may persist for a limited period.

Contact

Privacy questions: [email protected]. Related: Terms, DPA, Cookies.