Privacy Policy

1. Overview

WebCraft Studio ("we", "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect when you use our website generation service, how we use it, and your rights regarding that data.

2. Information We Collect

Account Information

Account creation and authentication is managed by Clerk. When you create an account, Clerk collects your email address and any personal details you provide. We receive a user identifier from Clerk to associate your account with your credits and generation history.

Payment Information

Payment processing is handled by our configured payment service. We do not receive, store, or process your credit card number or bank account information. We only receive a transaction confirmation from the payment service containing the payment amount and the credit plan purchased.

Generation Data

When you submit a generation request, we store the following on our servers:

• Your prompt (website description)
• Selected parameters (site type, design style, output format, etc.)
• Generated HTML or JSX output code
• Generation status, credit cost, and timestamps

Your prompt is sent to Anthropic's Claude API to generate the output. Please see the Anthropic Privacy Policy for how they handle API request data.

Usage Data

We may collect standard server logs including IP address, browser type, and pages visited, used solely for security monitoring and service maintenance.

3. How We Use Your Information

• Service Delivery — Process your generation requests and manage your credit balance.
• Account Management — Identify your account and maintain your generation history.
• Payment Processing — Verify payment service notifications and credit your account.
• Service Improvement — Understand usage patterns and fix issues.
• Security — Detect abuse, enforce terms of service, and protect users.

We do not sell your personal data to third parties.

4. Third-Party Services

WebCraft Studio relies on the following third-party services, each with their own privacy policy:

• Clerk — Authentication and account management. Clerk Privacy Policy
• Polar — Embedded payment processing. Polar Privacy Policy
• Anthropic — AI generation via the Claude API. Anthropic Privacy Policy

5. Data Retention

• Account data is retained while your account is active. After deletion, your account identifier and related records will be removed within 30 days.
• Generation records (prompts and output code) are retained for 90 days by default and may then be cleared from active storage.
• Transaction records are retained for the period required by applicable financial regulations.

6. Cookies

We only use cookies and similar technologies for authentication session management (via Clerk). We do not use tracking cookies or third-party advertising cookies.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated personal data

To exercise any of these rights, please contact [email protected]. We will respond within 15 business days.

8. Data Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS), server-side API key management, and database access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Minors

This service is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

10. Policy Changes

We may update this Privacy Policy from time to time. Changes take effect when posted on this page with an updated effective date. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related questions or requests, please contact [email protected].