Privacy Policy

Information You Provide

When you contact us, request a quote, or engage our services, we may collect your name, email address, phone number, company name, and project details. This information is provided voluntarily when you fill out contact forms or communicate with us directly.

Automatically Collected Information

When you visit our website, we may automatically collect certain information including your IP address, browser type, device information, pages visited, and time spent on our site. This helps us understand how visitors use our website and improve the user experience.

We use the information we collect to respond to your inquiries and provide requested services, communicate with you about projects and opportunities, improve our website and services, send relevant updates about our work (with your consent), and comply with legal obligations.

Cookies

We only use the cookies the site needs to work: sign-in cookies for the client portal and for our own admin area. We don't use advertising or cross-site tracking cookies, which is why there's no cookie banner. To keep Ask Craefto for people rather than bots, Vercel BotID runs an invisible check when you send it a message, which may set a short-lived security cookie.

Analytics

Vercel Web Analytics and Speed Insights count visits and measure page speed without cookies. Our own statistics record which pages are viewed, where visitors arrived from and any campaign tags, with a daily one-way fingerprint of your IP address and browser that can't be reversed. On journal articles, a random identifier in your browser's local storage helps us count returning readers and reading time.

Booking a call

The Discovery Call calendar is provided by Cal.com. It loads only when you open it, and Cal.com may set its own cookies, under its own privacy policy.

What it is

Ask Craefto is an AI assistant on this site. It answers questions from the content of our pages and can pass your enquiry to Craefto Works. It runs on Anthropic's Claude models through Vercel's AI Gateway, so your messages are processed in the United States, by providers that don't keep them after answering (zero data retention) and don't use them to train their models. It can make mistakes: prices, dates and commitments are always confirmed by Craefto Works.

What we keep

The conversation, the page you opened it on, your browser type and a daily one-way fingerprint of your IP address, used only to stop abuse. Nothing is sent to us until you confirm it: if you send an enquiry or ask for a person, we keep your name, email, any company and project details you give us, and the conversation with your enquiry, just as we do for the contact form. Ticking the journal box adds your email to our mailing list, and you can unsubscribe from any issue.

How long we keep it

Conversations that don't become an enquiry are deleted after 90 days. Please don't share passwords, payment details or other sensitive information in the chat.

We sometimes email businesses about their website, at addresses they publish for business enquiries. For each one we keep the business's name and website, the published address and where it was published, what we noticed on their site, the emails we exchange, and whether they've asked us not to write again. Replies are sorted with the help of AI (the same providers and safeguards as Ask Craefto), and a person at Craefto Works reads every reply that needs an answer. To stop our emails, reply "no thanks" or use the link in any email: the address goes on our do-not-email list, which we keep so we never write to it again.

We do not sell your personal information. We share it only with the service providers that run our business, and only as far as they need it: Vercel (website hosting and the AI Gateway), Supabase (our database, hosted in Sydney), Anthropic (the AI models behind Ask Craefto and reply sorting), Resend (the site's emails), Spaceship (our mailbox), Cal.com (booking calls), Stripe (payments for monthly plans) and Telegram (instant alerts to us about new enquiries and replies). Some of these providers store or process information outside Australia, mainly in the United States.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or delete your data, the right to object to or restrict processing, the right to data portability, and the right to withdraw consent. To exercise these rights, please contact us using the information below.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Project-related communications may be retained for the duration of our business relationship and a reasonable period thereafter. Ask Craefto conversations that don't become an enquiry are deleted after 90 days, and do-not-email records are kept for good, so we can keep honouring them.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website with a new effective date.

If you have questions about this Privacy Policy or our data practices, please contact us at hello@craefto.com. We will respond to your inquiry within a reasonable timeframe.