Privacy Policy

Who we are

CRAFT DIGITAL, operating as TextTrace, is responsible for the personal data described in this policy. Contact us at business@craftdigital.co.in or at Pvt. No. 202, Plot Nos. 39 and 40A, Matiala Khusi Ram Village, Uttam Nagar, New Delhi, South West Delhi, Delhi 110059, India.

Information we collect

• Account data, including your email address, password hash, plan, and usage count.
• Content you choose to submit, including pasted text and uploaded supported files, while it is processed to return a result.
• Technical and usage data, such as device/browser information, timestamps, request logs, and an irreversible keyed hash used to meter anonymous free checks.
• Transaction references, subscription status, and limited billing metadata received from the payment provider. We do not receive or store full card, UPI, or bank-account credentials.
• Messages and contact details you provide when requesting support.

How we use information

• Provide text inspection, file processing, account, and subscription features.
• Authenticate users, enforce plan limits, process payments, and maintain transaction records.
• Protect the service, prevent abuse, diagnose errors, and improve reliability.
• Respond to support, privacy, cancellation, and refund requests.
• Comply with legal obligations and enforce our agreements.

Analytics

Where configured, TextTrace automatically enables PostHog product analytics for visitors. PostHog may collect route visits, page URLs, browser and device information, clicks and other interactions with interface elements, and product events such as tool selection, scan success or failure, plan type, coarse file-size range, result actions, account-security actions, and billing-flow outcomes. PostHog may also receive diagnostic information about unhandled browser errors and rejected operations, including error messages and stack traces.

After you sign in, analytics data may be associated with your internal TextTrace user ID, email address, plan, and subscription status. We do not intentionally include passwords, payment credentials, uploaded file contents, file names, submitted text, or cleaned output in custom analytics event properties. Page URLs may include query parameters, and automatically collected diagnostics or interaction data may contain contextual information not included in our custom event properties.

Session replay may run automatically when analytics is configured. PostHog's replay controls mask input values by default, but other rendered page text and interface content may be recorded. Do not use TextTrace for confidential or regulated content unless your organization has approved this analytics processing. Contact us using the details below to ask about your privacy rights or request deletion of analytics associated with your account.

• Analytics remains disabled when deployment credentials are absent.
• Automatic interaction capture, selected product events, page-leave events, session replay, and unhandled browser-error capture may be enabled.
• Analytics identity is reset when you sign out, helping prevent another user of the same browser from inheriting your identified analytics session.

Submitted text and files

Current workflows process submitted content to return the requested result and do not save it to a scan-history feature. For watermark rewriting, TextTrace sends bounded sentence context and selected candidate words to a configured model provider to generate contextual alternatives; that provider processes the data under its own applicable terms and privacy commitments. Content may exist briefly in memory, transit, security logs, or temporary processing storage. Do not submit confidential or regulated content unless your organization has approved both TextTrace and the configured model provider.

Payments

Checkout and payment processing are provided by Dodo Payments. Dodo processes payment credentials under its own privacy policy. We receive only the information needed to confirm payment, manage access, prevent fraud, and handle disputes or refunds.

When we share information

We do not sell personal data. We may share the minimum necessary data with hosting, database, AI inference for contextual rewriting, security, analytics, communications, and payment providers acting for us; with professional advisers; when required by law; to protect rights and safety; or in connection with a merger, financing, or sale subject to appropriate safeguards.

Retention and security

We retain account, transaction, security, and support records only for as long as reasonably necessary for the purposes above, including tax, accounting, fraud-prevention, and legal requirements. We use access controls, encrypted transport, password hashing, and reasonable technical and organizational safeguards. No internet service can guarantee absolute security.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of personal data, or withdraw consent where processing relies on consent. You may also cancel marketing communications and manage your subscription separately. We may verify your identity before fulfilling a request.

Children

TextTrace is not directed to children under 18, and we do not knowingly collect their personal data. A parent or guardian who believes a child has provided data should contact us.

Updates and contact

We may update this policy and will post the revised date on this page. For privacy questions or requests, email business@craftdigital.co.in or write to Pvt. No. 202, Plot Nos. 39 and 40A, Matiala Khusi Ram Village, Uttam Nagar, New Delhi, South West Delhi, Delhi 110059, India.