Your Privacy, Our Commitment

We collect only the information necessary to operate the CrafyArt Invites service. This includes:

• Account details — your name, email address, and mobile number when you register.
• Campaign data — campaign names, schedules, message templates, and variable mappings you configure.
• Guest list (CSV) — contact names and WhatsApp numbers you upload for sending invitations. This data is stored securely and used solely to send your campaign.
• Uploaded media — PDF and image files you upload as your invitation design.
• Usage data — delivery status logs, credit usage, and basic session analytics to improve our service.
• WhatsApp session tokens — encrypted session tokens when you use the Personal WhatsApp login feature (see Section 3 for full details).

Your data is used exclusively to deliver the service you signed up for:

• To send WhatsApp invitations to the contacts you specify in your campaigns.
• To personalise each message with the variable values you configure (guest names, venue, date, etc.).
• To track delivery status (sent, delivered, read, failed) and display it in your dashboard.
• To manage your credit balance and generate usage reports.
• To send you transactional emails regarding your account (low credits, campaign completion, etc.).

By using the Personal WhatsApp sending method, you acknowledge and accept the following risks:

• Number ban risk: WhatsApp may temporarily or permanently ban your mobile number if it detects bulk or automated messaging activity. This is entirely at WhatsApp's discretion.
• Session termination: WhatsApp may forcibly log out your linked device / session at any time without notice.
• No guarantees: We cannot guarantee delivery if WhatsApp restricts or bans your number mid-campaign.
• Legal compliance: You are solely responsible for ensuring your use complies with WhatsApp's policies, local communication laws, and any applicable regulations.

• All data is stored on servers located in India (or within the region you registered from) with industry-standard encryption at rest and in transit (TLS 1.2+).
• WhatsApp session tokens are encrypted using AES-256 before storage and are never logged in plaintext.
• Uploaded PDF/image files are stored in a private object store and are not publicly accessible without a signed URL.
• Guest contact lists (CSV data) are retained for the duration of the campaign and for 30 days after completion, after which they can be deleted on request.
• We do not retain your WhatsApp session after you log out or after your session expires.

Despite our best efforts, no system is 100% secure. In the unlikely event of a data breach, we will notify affected users within 72 hours in accordance with applicable data protection laws.

We use a limited set of trusted third-party services to operate CrafyArt Invites:

• Meta / WhatsApp Business API — used for the CrafyArt Invites Official sending channel. Subject to Meta's Privacy Policy.
• Payment processor — for credit purchases. We share only the minimum data required to process your payment.
• Cloud storage — for storing uploaded media files securely.
• Analytics — anonymised usage analytics only. No personally identifiable information is shared.

We do not use advertising networks, remarketing pixels, or any third-party service that would allow others to track our users.

You have the following rights over your data:

• Access: Request a copy of all personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and all associated data (subject to legal retention requirements).
• Portability: Request your campaign and contact data in a machine-readable format.
• WhatsApp session revocation: You can log out your WhatsApp session at any time from your account — this immediately destroys the stored session token.

To exercise any of these rights, contact us at support@craftyartapp.com or WhatsApp us at +919274578205. We will respond within 7 working days.

If you have any questions about this Privacy Policy or how we handle your data, reach us at: