Privacy & SecurityVersion: privacy_v1

Privacy Policy

Kraftaura is committed to safeguarding the privacy and security of merchants and their customers. This policy details our data collection, handling, and security practices.

Effective Date: August 30, 2026
Last Updated: August 30, 2026

1. Information We Collect

When you register for Kraftaura or manage your store, we collect information necessary to provide and secure our platform services:

  • Account Information: Name, business name, email address, password hash, and terms acceptance timestamp.
  • Storefront Data: Product catalog items, pricing, images, logos, theme preferences, and business contact information (WhatsApp number, Instagram handle, address).
  • Transactional & Order Metadata: Store order records, customer checkout selections, and invoice summaries generated through your store.
  • Technical Diagnostics: IP address, device type, browser headers, and platform interaction logs used for security monitoring.

2. How We Use Your Data

We process merchant information strictly to:

  • Operate, maintain, and deliver your digital storefront and catalog system.
  • Facilitate customer WhatsApp order generation and payment settlements.
  • Authenticate user access and enforce Row-Level Security across tenant databases.
  • Send administrative service notifications, security alerts, and subscription updates.

3. Multi-Tenant Data Isolation & Security

Kraftaura employs PostgreSQL Row-Level Security (RLS) and cryptographic session handling through Supabase Auth. Each merchant's product catalogs, analytics, customer orders, and settings are strictly isolated and protected from unauthorized cross-tenant access.

4. Payment Information Security

Payment transactions for platform subscriptions and customer checkouts are processed via certified payment partners, including Razorpay. We do not store sensitive cardholder data (such as full card numbers or security codes) on our application servers.

5. Third-Party Service Providers

We may engage trusted third-party providers (such as cloud hosting, image delivery CDNs, and transactional email infrastructure) solely to support platform functionality under strict confidentiality and security standards. We do not sell merchant or customer data to third-party advertisers.

6. Your Rights & Contact

Merchants may access, update, or export their catalog data at any time via the Kraftaura dashboard. For data privacy inquiries or account data deletion requests, contact us at:

Privacy & Data Protection Contact:

legal@kraftaura.in
Kraftaura Platform • privacy_v1