Privacy Policy

1. Overview

Shotcraft is a screenshot beautifier tool where all image processing happens entirely in your browser. Your screenshots and images are never uploaded to our servers and are never stored by us. This policy explains the limited information we do collect, why we collect it, and how you can exercise your rights.

2. Information We Collect

a. Account information

When you create an account, we collect your email address and a hashed password (or a third-party OAuth token if you sign in via a provider). We use this to identify your account and send you transactional emails (password resets, receipts).

b. Usage analytics

We collect anonymized usage data (pages visited, features clicked, session duration, browser/OS type) to understand how the product is used and how to improve it. This data does not include the content of your screenshots.

c. Payment information

Payments are processed by Stripe, Inc., which acts as our payment processor. We do not store your full card number or CVV. Stripe may share with us limited billing details such as the last four digits of your card and billing address for fraud prevention. Stripe's privacy practices are governed by Stripe's Privacy Policy.

d. Images and screenshots

All image processing (backgrounds, shadows, device frames, exports) is performed locally in your browser using the HTML Canvas API. No image data is transmitted to or stored on our servers.

e. Log data

Our servers automatically record standard log data when you access the Service: IP address, browser type, pages requested, and timestamps. We retain logs for up to 90 days for security and operational purposes.

3. How We Use Your Information

• To operate, maintain, and improve the Service.
• To process payments and send billing-related communications.
• To send transactional emails (account verification, password reset, receipts).
• To send product update emails, if you have opted in.
• To detect and prevent fraud, abuse, or security incidents.
• To comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Cookies

We use a small number of essential cookies to keep you signed in and to remember your preferences. We may also use analytics cookies to understand aggregate usage patterns.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in or using certain features.

5. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing. Handles all card transactions on our behalf.
• Analytics provider — anonymized usage analytics to improve the product. No personally identifiable information is shared.

Each third party processes data under their own privacy policies, which we encourage you to review.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g., billing records).

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — request that inaccurate data be corrected.
• Deletion — request that your personal data be deleted.
• Portability — request your data in a machine-readable format.
• Opt-out — unsubscribe from marketing emails at any time via the unsubscribe link in any email.

To exercise any of these rights, contact us at ryan@sarvixo.co.

8. Security

We use industry-standard technical and organizational measures to protect your personal data, including TLS encryption in transit and encrypted storage at rest. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. If we make material changes, we will notify you by email or by a prominent notice in the Service before the change takes effect.

11. Company & Contact

Shotcraft is operated by Aayla Secura LLC, doing business as Sarvixo (sarvixo.co).

Privacy questions or requests: ryan@sarvixo.co