Privacy Policy

Introduction

SKrafts ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our e-commerce platform and services.

By accessing or using SKrafts, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our services.

Information We Collect

1. Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, business name, business address
• Payment Information: Billing details processed securely through Razorpay (we do not store complete payment card details)
• Business Data: Product catalogs, customer information, orders, inventory data
• Content: Photos, descriptions, brand assets you upload to your store
• Communications: Messages sent through our support channels

2. Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent, actions taken
• Device Information: IP address, browser type, operating system, device identifiers
• Analytics: Store performance metrics, customer behavior, sales data
• Cookies: Session cookies, preference cookies, analytics cookies

3. Information from Third Parties

• Payment processor (Razorpay) transaction data
• Social media platforms (Instagram, WhatsApp) when you connect integrations
• Email service providers for transactional emails

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your subscription
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate about products, services, offers, and events
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations and enforce our terms
• Provide customer support and onboarding assistance
• Generate analytics and insights to improve your business performance

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

With Your Consent

We share information when you explicitly consent, such as connecting your Instagram account or integrating third-party tools.

Service Providers

We share information with vendors, consultants, and service providers who need access to perform services on our behalf:

• Payment processing (Razorpay)
• Cloud hosting (AWS, Vercel)
• Email delivery (SendGrid, Resend)
• Analytics services (Vercel Analytics)
• Customer support tools

Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, and safety of SKrafts, our users, or others.

Business Transfers

If SKrafts is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our website.

Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption: All data transmitted is encrypted using SSL/TLS
• Access Controls: Strict access controls and authentication requirements
• Secure Storage: Data encrypted at rest in secure databases
• Regular Audits: Security assessments and penetration testing
• PCI DSS Compliance: Payment data handled according to industry standards
• Monitoring: 24/7 security monitoring and incident response

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.

Data Retention

We retain your information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Data retained while your account is active
• Closed Accounts: Most data deleted within 90 days of account closure
• Legal Requirements: Some data retained longer for tax, legal, or regulatory purposes (typically 7 years)
• Backup Systems: Data may persist in backup systems for up to 30 days after deletion

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Update

You can access and update your account information at any time through your dashboard settings.

Data Portability

You can export your data (products, customers, orders) in CSV or JSON format from your dashboard.

Deletion

You can request deletion of your account and data by contacting support@skrafts.com. Some information may be retained as required by law.

Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any marketing email or updating your email preferences in account settings.

Cookies

Most browsers allow you to control cookies through settings. Disabling cookies may affect functionality of our services.

International Data Transfers

Your information may be transferred to and processed in countries other than India. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on our website at least 30 days before the changes take effect. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

India-Specific Rights

Under Indian data protection laws, you have additional rights including:

• Right to confirmation and access to your personal data
• Right to correction of inaccurate or incomplete data
• Right to data portability
• Right to be forgotten (with certain exceptions)
• Right to restrict processing

To exercise these rights, please contact us at privacy@skrafts.com with your request.