Policies

Depending on how you use Craft Digital, we hold:

• account data — email address, name, and anything you add to your profile
• order data — what you bought, the licence, the amounts, and billing name and email
• entitlement and download logs — which files you downloaded and when
• seller data — shop details, payout requests and the transaction ledger
• messages you send us through the contact form
• newsletter subscriptions, if you opt in

To deliver what you bought, verify download access, calculate seller earnings, prevent abuse, and answer your support requests.

We do not sell your personal data, and we do not use it for advertising profiles.

Sellers see the billing name and email attached to orders for their own products, and nothing about your other purchases.

Other buyers see only what you publish: your display name and avatar on reviews. Your email address is never exposed to client applications.

Data is stored in a Supabase-hosted PostgreSQL database with row level security enabled on every table, so access is enforced by the database rather than by application code alone.

You can view and edit your profile from your account settings, and request export or deletion of your data by contacting us. Some records — completed orders and the seller ledger — must be retained for accounting integrity.