Privacy Policy

1. Information We Collect

We collect information needed to provide, maintain, and protect the Service. The information collected may include:

• Account information: When you sign in using Google through Firebase Authentication, we may receive your name, email address, profile photo URL, and unique account identifier.
• Uploaded images and submitted content: When you use our image-to-prompt tools, you may submit images and text for processing. The information necessary to fulfill your request may be transmitted to our AI processing providers.
• Saved prompts and preferences: We may store prompts you save, favorite, bookmark, or add to your collection, together with relevant account information.
• Technical information: Our hosting and infrastructure providers may process technical information such as IP addresses, browser and device information, access timestamps, referring URLs, and security or diagnostic logs.
• Cookies and local storage: The website may use cookies, local storage, or similar technologies to maintain authentication sessions, remember preferences, and support features such as guest saved prompts.

2. Google Account Information

When you sign in using Google, we use the information provided through Firebase Authentication to create or identify your account, authenticate your session, and display your profile.

We do not sell Google account information or use it for targeted advertising or credit evaluation.

We do not intentionally provide Google account information to AI model providers for training public AI models. Information necessary to fulfill a feature request is handled separately as described in the third-party processing section below.

3. How We Use Information

We use relevant information for the following purposes:

• To create and authenticate user accounts.
• To provide saved prompts, favorites, and account features.
• To process uploaded images and text to generate descriptive prompts.
• To operate, maintain, and improve the functionality and reliability of the Service.
• To detect abuse, investigate security incidents, and protect our systems.
• To respond to support requests and communicate important service-related notices.
• To comply with applicable legal obligations.

We use Google Analytics and Google Tag Manager to analyze aggregated visitor traffic, site interactions, and performance to help us improve our services.

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis, we process personal information on the basis appropriate to the activity, which may include:

• Contract: To provide the features and services you request.
• Legitimate interests: To secure, maintain, and improve the Service, where permitted by law.
• Consent: Where you have given consent for a specific activity and consent is legally required.
• Legal obligations: To comply with applicable laws and lawful requests.

The applicable legal basis depends on the processing activity and your location.

5. Third-Party Services and Data Sharing

We do not sell personal information. We may share or transmit relevant information to service providers where necessary to operate the Service.

6. Data Retention

We retain information according to the purpose for which it is processed, applicable legal obligations, and operational requirements.

• Account information: May be retained while your account remains active and for an appropriate period afterward where needed for legal compliance, security, or dispute resolution.
• Saved prompts and preferences: May remain stored while associated with your account or until deleted, subject to applicable retention requirements.
• Technical logs: Infrastructure providers may retain logs for security, diagnostics, and operational purposes according to their own retention policies.
• Uploaded images: Images submitted for image-to-prompt analysis are processed transiently to generate descriptions and are not retained longer than necessary to complete the processing. Uploaded user images are not sold to third parties or used for public AI model training.

7. Cookies, Analytics and Advertising

We use essential cookies and local storage to maintain authentication sessions, remember user preferences, and support saved items or other website features.

We also use Google Analytics cookies to understand how visitors engage with the website, allowing us to enhance user experience and page performance. Third-party advertising partners (such as Google AdSense and advertising networks) may also serve cookies to display relevant advertisements based on visits to this and other websites.

You can manage or disable cookies at any time through your browser settings or opt-out mechanisms. Please note that disabling essential cookies may impact authentication and certain interactive website features.

8. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Request a copy of certain information in a portable format.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with an appropriate data protection authority.

To exercise an applicable right, contact ahmedrakin45@gmail.com. We may need to verify your identity before fulfilling a request.

9. Data Security

We use appropriate measures intended to protect information processed through the Service. These measures may include secure connections, access restrictions, and security features provided by our infrastructure providers.

No method of electronic transmission or storage can be guaranteed to be completely secure. We therefore cannot promise absolute security. Any description of specific technical safeguards should reflect measures that are actually implemented and maintained.

10. Children's Privacy

proCraft is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information through the Service, contact ahmedrakin45@gmail.com so that we can assess the situation and take appropriate action in accordance with applicable law. Where local law establishes a higher minimum age or additional consent requirements, those requirements apply.

11. International Data Transfers

proCraft is operated from Bangladesh. Our service providers may process information in Bangladesh, the United States, or other jurisdictions, depending on their infrastructure and the services used.

Where personal information is transferred internationally, we will take steps required by applicable law to support lawful transfers and appropriate protection.

12. Third-Party Links and Services

The Service may link to third-party websites or integrate third-party tools. Their privacy practices are governed by their own policies, not this Privacy Policy. We encourage you to review the privacy terms of any third-party service before submitting personal information to it.

13. Changes to This Privacy Policy

We may update this Privacy Policy as the Service, our practices, or applicable legal requirements change.

We will update the “Last updated” date when revisions are made and provide additional notice where required by law. We encourage you to review this page periodically.