This Privacy Policy explains how PopCraft. ("PopCraft", "we", "us") collects, uses and shares information about you when you use our websites, editor, desktop app, APIs and related services (the "Services"). By using the Services you agree to the practices described here.
1. Information we collect
Information you provide
- Account information: your name, email address, profile picture and password or single sign-on identity.
- Content: the files, designs, images, fonts, comments, plugins and other material you create or upload ("Customer Content").
- Billing information: your billing address and payment details, which are processed by our payment provider. We do not store full card numbers.
- Communications: messages you send us through the contact form, email or support channels.
Information collected automatically
- Usage data: pages visited, features used, actions taken, and the date and time of your activity.
- Device and log data: IP address, browser type, operating system, device identifiers and crash reports.
- Cookies and similar technologies: see our Cookie Policy.
Information from third parties
- Sign-in providers: if you sign in with a third-party identity provider (such as Google, GitHub or Sign in with Apple), we receive your basic profile information from that provider. With Sign in with Apple you may choose to hide your email address, in which case we receive an Apple relay address instead.
- Workspace administrators: if your organization invites you, it may provide your name and email address.
2. How we use information
We use information to:
- Provide, maintain and improve the Services, including real-time collaboration and syncing.
- Authenticate you, secure accounts and prevent fraud and abuse.
- Process payments and send receipts, service notices and security alerts.
- Respond to your requests and provide customer support.
- Understand how the Services are used so we can fix bugs and build better features.
- Send product updates and marketing messages, where permitted — you can opt out at any time.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information, and we do not use Customer Content to train generative AI models without your explicit opt-in.
3. Legal bases (EEA and UK users)
We process personal data on the following bases: to perform our contract with you; for our legitimate interests in operating, securing and improving the Services; with your consent (for example, non-essential cookies and marketing); and to comply with legal obligations.
4. How we share information
We share information only as follows:
- With collaborators: content you share is visible to the people you share it with, according to the permissions you set.
- With service providers who process data on our behalf (hosting, storage, email delivery, payments, analytics), under contracts that require them to protect it.
- With AI providers, only when you use AI features, and only the content needed to fulfil that request.
- For legal reasons, if required by law or to protect the rights, property or safety of PopCraft, our users or the public.
- In a business transfer, such as a merger or acquisition, subject to this policy.
5. Data retention
We keep personal information for as long as your account is active or as needed to provide the Services. You can delete your account at any time from Settings (in the account menu) in the editor or in any of our apps. Your sign-in account and everything PopCraft stores on the device you delete it from are deleted right away. Your cloud files, media, versions, templates, libraries, access tokens and webhooks are hidden immediately and deleted after 30 days; until then, you can restore the account from the link we email you. Files in a team workspace stay with that team. After the 30 days, we delete or anonymize your personal information, except where we must retain it for legal, tax or security purposes. Backups are purged on a rolling 90-day cycle.
6. Security
We use administrative, technical and physical safeguards designed to protect your information, including encryption in transit and at rest. No method of transmission or storage is 100% secure. See our Security page for details.
7. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy.
- Correct inaccurate information.
- Delete your information.
- Object to or restrict certain processing.
- Port your data to another service.
- Withdraw consent at any time, where processing is based on consent.
You can exercise most of these rights in your account settings, or by contacting privacy@popcraft.app. We will not discriminate against you for exercising your rights. You may also lodge a complaint with your local data protection authority.
California residents: you have the rights described in the CCPA/CPRA, including the right to know, delete and correct, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined.
8. International transfers
PopCraft is based in the United States and our providers may process data in other countries. Where we transfer personal data out of the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
9. Children
The Services are not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect. The "last updated" date above shows when it was last revised.
11. Contact us
PopCraft. Attn: Privacy privacy@popcraft.app · Contact form