Privacy Policy

The controller of your personal data is Substrate Artificial Intelligence SA, Valencia, Spain ("we", "us"), operator of Crafter Labs (crafterlabs.app) and the Crafter application. Contact: hello@crafterlabs.app.

• Access requests: name, work email, organization, role, what you'd build, how you heard about us, language.
• Account: email, name, organization, sign-in method, language preference.
• Billing: plan, subscription status and billing period. Card details are handled by Stripe; we never see or store them.
• Communications: a record of emails we send you (recipient, type, delivery status).
• Technical: essential cookies and logs needed to run and secure the service; analytics only if you consent.

• Reviewing your access request and replying — steps prior to a contract (Art. 6(1)(b) GDPR).
• Providing your account, subscription and the Crafter application — performance of a contract (Art. 6(1)(b)).
• Invoicing, tax and accounting records — legal obligation (Art. 6(1)(c)).
• Security, fraud prevention and service improvement — legitimate interests (Art. 6(1)(f)).
• Analytics cookies — consent (Art. 6(1)(a)), which you can withdraw at any time via "Cookie settings".

We share data only with service providers acting on our instructions under data processing agreements:

• Lovable Cloud — website hosting, authentication and database.
• Stripe — payments, subscriptions, invoices and tax calculation.
• Resend — sending transactional emails.
• Amazon Web Services — Crafter application hosting in an EU region.
• Serenity Star — AI processing for the work you request.
• WorkOS — Crafter authentication.

Some providers may process data outside the European Economic Area. Where they do, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

• Access requests that don't become accounts: up to 24 months, then deleted.
• Account data: for as long as your account is open. When you delete your account, we delete it promptly.
• Billing records: as long as Spanish tax and commercial law requires (generally 6 years).
• Email and security logs: up to 12 months.

You have the right to access, rectify, erase, restrict or object to processing of your data, and to data portability. You can withdraw consent at any time.

From your account page you can download your data as a JSON file and delete your account. For anything else, email hello@crafterlabs.app. We reply within one month.

You may also complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

We use essential cookies and local storage for sign-in, security, language and theme. With your consent, we use analytics cookies. You can change your choice at any time via "Cookie settings" in the footer.

We may update this policy. We'll change the "Last updated" date and, for significant changes, tell you by email.