Privacy Policy

1. Who We Are

CraftedDocs ("we", "us", "our") is an online marketplace for academic study documents where students can buy and sell notes, guides, and other educational materials. When you use our website at crafteddocs.com, you agree to the practices described in this Privacy Policy.

For any privacy-related questions, contact us at contact@crafteddocs.com.

2. Information We Collect

2.1 Information you provide directly

• Account registration: name, email address, password (hashed), college/university
• Profile information: bio, phone number, profile photo (optional)
• Payout details: UPI ID, bank account number, IFSC code (sellers only — stored securely, visible only to administrators)
• Uploaded documents: PDF files, cover images, title, description, tags
• Communications: messages you send to our support team

2.2 Information collected automatically

• Usage data: pages visited, documents viewed, search queries, time spent on site
• Device information: IP address, browser type, operating system
• Transaction data: purchase history, order references, payment method type (we do not store full card numbers)
• Session data: login sessions managed via secure cookies
• Download logs: which documents were downloaded and when

2.3 Payment information

Payments are processed by third-party providers (Razorpay and/or PayPal). We do not store your full card number, CVV, or bank login credentials. We only receive transaction IDs and payment status confirmation from these providers. Please review their respective privacy policies for how they handle your payment data.

3. How We Use Your Information

• To create and manage your account
• To process purchases and deliver digital documents
• To process seller payouts to your UPI ID or bank account
• To send transactional emails (order confirmations, payout notifications)
• To improve our platform, detect fraud, and ensure security
• To respond to support requests
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

4. How We Share Your Information

4.1 With other users (limited)

When you sell a document, your display name is shown on the document listing. Buyers do not see your email, phone number, or payout details.

4.2 With service providers

We share data with trusted third-party services that help us operate CraftedDocs:

• Razorpay / PayPal — payment processing
• Hosting provider — server infrastructure
• Email service — transactional emails

These providers are contractually bound to protect your data and may not use it for their own purposes.

4.3 Legal requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of CraftedDocs, its users, or the public.

5. Data Storage & Security

Your data is stored on servers located in India. We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Bcrypt password hashing (minimum cost factor 12)
• Signed download tokens for document access (no direct file URLs)
• CSRF protection on all forms and API endpoints
• Regular security reviews

While we take every reasonable precaution, no system is 100% secure. Please use a strong, unique password for your account.

6. Cookies

We use the following cookies:

• Session cookie — keeps you logged in. Required for the site to function.
• CSRF token — protects form submissions. Required for security.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update incorrect information via your dashboard (Profile tab)
• Deletion — request deletion of your account and associated data
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, by deleting your account

To exercise any of these rights, email us at contact@crafteddocs.com. We will respond within 7 business days.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g. financial transaction records, which are kept for 7 years as required by Indian tax law).

9. Children's Privacy

CraftedDocs is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately at contact@crafteddocs.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of CraftedDocs after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, concerns, or requests:

• Email: contact@crafteddocs.com
• Response time: Within 7 business days