Skip to main content

Privacy Policy

Last updated: March 10, 2026

1. Who We Are

CraftBoop ("we," "us," or "our") operates the CraftBoop platform at craftboop.com. We provide automated email follow-up services for local service businesses. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, application, and services.

2. Information We Collect

2.1 Information You Provide Directly

  • Account information: Name, email address, and password when you create an account.
  • Business information: Business name, type, physical address, Google review link, and Yelp link.
  • Customer data: Names, email addresses, and service descriptions of your customers that you upload to our platform.
  • Payment information: Billing details processed securely by Stripe. We never store your full credit card number on our servers.
  • Referral data: Names and optional email addresses submitted through referral links.

2.2 Information Collected Automatically

  • Usage data: Pages visited and features used within the CraftBoop dashboard.
  • Email engagement data: When emails are sent on your behalf, our email delivery provider (Resend) may track whether recipients open emails or click links. This data is used to provide you with analytics on your email performance. Email recipients are not individually tracked across websites.
  • Device information: Browser type, operating system, IP address, and device identifiers.
  • Cookies: We use essential cookies for authentication and session management. See Section 8 below.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide, maintain, and improve our email follow-up services.
  • Send automated email sequences to your customers on your behalf.
  • Generate AI-powered email templates customized for your business.
  • Process payments and manage subscriptions.
  • Provide analytics on email performance (open rates, click rates, review conversions).
  • Communicate with you about your account, updates, and support requests.
  • Detect fraud, abuse, and security incidents.
  • Comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We share data only as follows:

  • Service providers: We use third-party services to operate our platform, including Clerk (authentication), Convex (database), Stripe (payments), Resend (email delivery), and Anthropic (AI template generation). These providers only access data necessary to perform their functions and are bound by contractual obligations to protect it.
  • Email recipients (your customers): When you add a customer to CraftBoop, we send emails on your behalf. These emails identify your business as the sender and include your business address.
  • Legal compliance: We may disclose information if required by law, subpoena, court order, or governmental request.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

5. AI-Generated Content

CraftBoop uses artificial intelligence (Anthropic's Claude API) to generate and rewrite personalized email templates for your business. To do this, we send your business name and business type to Anthropic's servers. We do not send your customer data (names, emails, or service details) to the AI. Anthropic processes this data under their API terms of service and does not use API inputs to train their models. All AI-generated templates are fully editable by you before any emails are sent. We do not use AI to generate review content, nor do we use your customer data to train AI models.

6. Data Retention

We retain your account and business data for as long as your account is active. Customer email data is retained for the duration of the email sequence (up to 60 days) plus an additional 90 days for analytics purposes, unless you delete it sooner. Payment records are retained as required by applicable tax and accounting laws. When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/HTTPS) and at rest, secure authentication via Clerk, and access controls. Payment information is processed exclusively by Stripe, a PCI DSS Level 1 certified payment processor. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising cookies. Our third-party service providers (Clerk, Convex) may set their own necessary cookies. Email engagement tracking (opens and clicks) is handled by our email delivery provider (Resend) using standard email tracking methods, not browser cookies. You can configure your browser to refuse cookies, but some features of the service may not function properly without them.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

For All Users

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate personal information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Portability: Request a copy of your data in a portable format.

Additional Rights for California Residents (CCPA/CPRA)

  • Right to know what personal information we collect, use, disclose, and sell.
  • Right to opt out of the sale or sharing of personal information. We do not sell your personal information.
  • Right to limit use of sensitive personal information.
  • Right to non-discrimination for exercising your privacy rights.

Additional Rights Under Other State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of certain data processing. We honor all valid consumer rights requests regardless of state of residence.

To exercise any of these rights, email us at privacy@craftboop.com. We will respond within 45 days as required by applicable law.

10. Email Recipients (End Consumers)

If you received an email sent through CraftBoop on behalf of a service business, please note: the service business is the data controller for your personal information (name and email address). CraftBoop acts as a data processor on behalf of that business. To exercise your privacy rights regarding emails you received, you may contact the business directly or email us at privacy@craftboop.com. Every email includes a one-click unsubscribe link. Once unsubscribed, you will receive no further emails from that business through our platform.

11. Children's Privacy

CraftBoop is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child's information has been provided to us, please contact us at privacy@craftboop.com and we will delete it promptly.

12. International Data Transfers

CraftBoop is based in the United States and processes data in the United States. If you are accessing our service from outside the United States, your data will be transferred to and processed in the United States. By using our service, you consent to this transfer. We will apply appropriate safeguards to protect your data regardless of where it is processed.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

CraftBoop
Email: privacy@craftboop.com