Privacy Policy
This Privacy Policy explains how Equatris LLC ('Kraffa', 'we', 'us', or 'our') collects, uses, and shares information when you use the Kraffa platform. Last updated: August 1, 2026.
Who We Are
Kraffa is operated by Equatris LLC, a company organized under the laws of the State of Wyoming, USA, with a registered address at 30 N Gould St #49134, Sheridan, WY 82801. We serve users globally, including in the United States, the European Economic Area, the United Kingdom, and Türkiye. If you have questions about this policy or our privacy practices, contact us at support@kraffa.com.
Information We Collect
We collect several categories of information. Account and profile data: your email address, name, interface language, and timezone, stored in your account profile; your password is handled directly by Supabase Auth, our authentication provider, and we never see it in plaintext, and we do not currently offer social sign-in or two-factor authentication. Billing data: payments are processed by Stripe, which acts as merchant of record, so we do not collect or store your full card number; we retain your subscription status, plan, invoice metadata, and billing currency, and Stripe and its payment partner Link issue receipts and invoices on our behalf. Content you provide for generation: product identifiers (SKUs) and related details; for T-Shirt products, a listing link you provide (for example, from Etsy) together with an image retrieved from that link; and for Jewelry products, photos you upload directly and structured attributes describing the item — this content is used solely as an input to generate your designs and mockups. Generated assets: the AI-generated designs, mockups, and ZIP packages we create for you are stored privately in Cloudflare R2, our cloud storage provider, with short-lived, access-controlled links. Usage and technical data: device and browser information, log data, and error and performance diagnostics. Cookies: we use essential cookies needed to keep you signed in and to operate the service; see our Cookie Policy at /cookies for details.
How We Use Your Information
We use your information to operate the Kraffa platform and the design-and-mockup generation pipeline; to process payments and manage your subscription and credit balance; to provide customer support; to maintain the security of the service, prevent abuse, and enforce rate limits; to comply with our legal obligations; and to send you transactional service email, such as billing receipts and account notifications.
Legal Bases for Processing (EEA/UK)
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract, to provide the service you have signed up for; our legitimate interests, such as keeping the service secure and improving it; your consent, where we specifically ask for it; and compliance with our legal obligations.
Sharing & Sub-Processors
We do not sell your personal data. We share information with service providers who process it on our behalf, under contractual confidentiality and data-protection obligations: Supabase (authentication and database hosting), Cloudflare R2 (private storage for your uploads and generated assets), Stripe and Link (payment processing, tax, and receipts — Stripe acts as merchant of record for subscriptions), Resend (transactional email delivery), Sentry (error and performance monitoring), and third-party AI providers that process your generation inputs solely to analyze, generate, upscale, and refine your designs and mockups. We may also disclose information where required by law, regulation, or legal process.
International Data Transfers
We are based in the United States, and your information may be processed in the United States and in other countries where our service providers operate. Where we transfer personal data out of the European Economic Area, the United Kingdom, or other regions with data-transfer restrictions, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect your information.
Data Retention & Deletion
We retain your account data for as long as your account remains active. You can delete your account at any time from Settings; this triggers a soft delete, and your data is kept for up to 30 days, during which you may restore your account, after which it is permanently deleted. Generated designs, mockups, and packages are removed by automated retention processes in line with this policy. Billing records may be retained for a longer period where required by law or by our payment processor.
Your Privacy Rights
If you are in the European Economic Area or the United Kingdom, data protection law (GDPR) gives you the right to access, correct, erase, or restrict the use of your personal data, to receive a copy of it in a portable format, to object to certain processing, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority. If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to access and delete it, to correct inaccuracies, and to opt out of the 'sale' or 'sharing' of personal information — we do not sell or share your personal information, and we will not discriminate against you for exercising any of these rights. If you are in Türkiye, Article 11 of the Personal Data Protection Law (KVKK) gives you the right to learn whether your personal data is processed, to request information about that processing, and to request correction or deletion of your data, among other related rights. To exercise any of these rights, contact us at support@kraffa.com; many actions, such as updating your profile or deleting your account, are also available directly from Settings.
Security
We protect your information using row-level security on our database so accounts can only access their own data, encryption in transit via HTTPS and HSTS, private object storage with short-lived, access-controlled links, secure httpOnly session cookies, and ongoing monitoring for errors and abuse.
Children's Privacy
Kraffa is not directed to children, and we do not knowingly collect personal data from children under 16 in the European Economic Area or under 18 elsewhere. If you believe a child has provided us with personal data, please contact us at support@kraffa.com so we can delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the effective date at the top of this page, and where appropriate we will provide additional notice.
Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact us at support@kraffa.com or by mail at Equatris LLC, 30 N Gould St #49134, Sheridan, WY 82801, USA.