Privacy Policy

This Privacy Policy explains how CraftyAlpha ("CraftyAlpha", "we", "us") collects and uses personal data when you visit craftyalpha.com or interact with our products and services.

Who we are

CraftyAlpha is an independent software studio based in Scotland. Correspondence address: Scotland, United Kingdom (address provided on request). For privacy queries, contact privacy@craftyalpha.com.

What we collect

• Contact data you provide when you email us, join a product waitlist, or fill in an enquiry form (name, email, message).
• Account data if you sign in to a CraftyAlpha product (email address, authentication tokens via Supabase).
• Usage data — basic, privacy-respecting analytics such as page views and referrers. We do not use advertising trackers.
• Payment data — handled by Stripe. We never store card numbers.

Lawful basis

We rely on (a) contract to deliver services you sign up for, (b) legitimate interests to run and secure our site, and (c) consent for any non-essential cookies.

Sharing

We share data with carefully chosen processors — including Supabase (auth/database), Vercel (hosting) and Stripe (payments) — only to the extent needed to operate the service. We do not sell personal data.

Retention

We keep personal data only for as long as it is necessary for the purposes set out above, or as required for tax and legal record-keeping (typically 6 years for HMRC).

Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. Email privacy@craftyalpha.com and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Changes

We may update this policy from time to time. Material changes will be flagged on the site and dated above.