🔒 Privacy Policy
Last updated: November 13, 2025
CraftHit ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at crafthit.ai.
⚠️ Important: By using our service, you consent to the data practices described in this policy.
📋 1. Data Controller
Responsible Party (GDPR Art. 4):
Grigorii Sardarian
Melsunger Straße 3
60389 Frankfurt am Main, Germany
Email: info@crafthit.ai
Phone: +49 157 748 14 503
📊 2. What Data We Collect
2.1 Personal Information You Provide
- Contact Information: Name, email address, phone number
- Order Details: Song preferences (style, mood, vocal type), custom descriptions
- Payment Information: Processed securely through Stripe (we do not store credit card details)
- User Content: Photos you upload for video creation, text descriptions
2.2 Automatically Collected Data
- Usage Data: IP address, browser type, device information
- Cookies: Session cookies, analytics cookies (see Cookie Policy below)
- Log Data: Access times, pages viewed, actions taken
🎯 3. How We Use Your Data
Legal Basis (GDPR Art. 6):
- Contract Performance: To provide our song and video creation services
- Legitimate Interest: To improve our services, prevent fraud
- Consent: For marketing communications (opt-in required)
- Legal Obligation: Tax records, dispute resolution
Specific Purposes:
- ✅ Creating personalized songs and videos as requested
- ✅ Processing payments and sending order confirmations
- ✅ Communicating about your orders and our services
- ✅ Improving our AI models and service quality
- ✅ Sending promotional offers (only with your consent)
- ✅ Complying with legal obligations
🤝 4. Data Sharing & Third Parties
We share data with the following service providers (Data Processors):
🎵 Suno API
Purpose: AI music generation
Data Shared: Song descriptions, style preferences
Location: USA
Privacy Policy: suno.com/privacy
🎬 InfiniteTalk
Purpose: Video animation
Data Shared: Uploaded photos
Location: Our own server (Germany)
💳 Stripe
Purpose: Payment processing
Data Shared: Payment information, email
Location: USA (Standard Contractual Clauses in place)
Privacy Policy: stripe.com/privacy
⚠️ International Data Transfers: Some of our service providers are located outside the EU. We ensure appropriate safeguards through Standard Contractual Clauses (SCCs) as per GDPR Art. 46.
⏰ 5. Data Retention
- Order Data: 3 years (for warranty and legal claims)
- Payment Records: 10 years (tax law requirements)
- Marketing Consent: Until you withdraw consent
- User Content: 90 days after order completion (unless you request earlier deletion)
- Analytics Data: 26 months
✊ 6. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right to Access (Art. 15): Request a copy of your personal data
- Right to Rectification (Art. 16): Correct inaccurate data
- Right to Erasure (Art. 17): Request deletion of your data ("Right to be Forgotten")
- Right to Restriction (Art. 18): Limit how we use your data
- Right to Data Portability (Art. 20): Receive your data in a structured format
- Right to Object (Art. 21): Object to processing based on legitimate interests
- Right to Withdraw Consent: For marketing communications
To exercise your rights: Contact us at info@crafthit.ai
We will respond within 30 days.
📧 7. Marketing Communications
We will only send promotional emails if you opt-in. You can unsubscribe anytime by:
🍪 8. Cookies
We use the following cookies:
- Essential Cookies: Required for site functionality (no consent needed)
- Analytics Cookies: Google Analytics (anonymized IP) - requires consent
- Marketing Cookies: For retargeting (if you consent)
You can manage cookies in your browser settings.
🔐 9. Data Security
We implement appropriate technical and organizational measures:
- SSL/TLS encryption for data transmission
- Encrypted database storage
- Regular security audits
- Access controls and authentication
- Secure payment processing via Stripe (PCI-DSS compliant)
⚠️ Data Breach Notification: In case of a data breach, we will notify you and relevant authorities within 72 hours as required by GDPR Art. 33-34.
👶 10. Children's Privacy
Our service is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.
🔄 11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on our website.
📞 12. Contact & Complaints
Questions or concerns?
Email: info@crafthit.ai
Phone: +49 157 748 14 503
Supervisory Authority (Right to Lodge a Complaint):
If you believe we have not addressed your concerns, you can file a complaint with:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden, Germany
Website: datenschutz.hessen.de
🇪🇺 13. EU Representative
As we are established in the EU (Germany), no separate EU representative is required under GDPR Art. 27.