Privacy Policy
Effective [EFFECTIVE DATE] · Last updated [LAST UPDATED]Draft template for review by a qualified lawyer before launch. Bracketed items are decisions still to make.
01What we collect
Account details: name, email, role and the platforms you use. What you create: bios, prompts, uploaded photos and generated images. Billing: handled by Stripe; we only see the card brand, last four digits and expiry. Usage: pages viewed, features used, device and approximate location, to improve the product.
02How we use it
To generate and store your bios and images, run your account and team, send transactional emails (receipts, password resets, invites), keep the service secure, and, if you opt in, send product tips. We don’t sell your personal data.
03AI and your photos
Prompts and photos are sent to our AI providers (Anthropic) only to produce your results. They aren’t used to train our or our providers’ models. Original uploaded photos are deleted after 30 days; the finished images stay in your account until you delete them.
04Who we share with
Service providers that help us run Biocraft: hosting (Railway), email (Resend), payments (Stripe), analytics ([ANALYTICS PROVIDER]) and AI (Anthropic). Each one is bound by a data processing agreement. If you’re on a Team plan, admins can see your name, email, role and whether your profiles are up to date.
05Your rights
You can access, correct, export or delete your data from Settings, or by writing to [CONTACT EMAIL]. Depending on where you live, you may have additional rights under [APPLICABLE DATA LAWS, e.g. GDPR, UK GDPR, CCPA/CPRA]. We reply within [RESPONSE TIME].
06Keeping data safe
Data is encrypted in transit and at rest. Access is limited to staff who need it. If a breach affects you, we’ll tell you without undue delay.
07Contact
Data controller: [COMPANY LEGAL NAME], [COMPANY ADDRESS]. Privacy questions: [CONTACT EMAIL].