CarouselCraft

Legal

Privacy Policy

Last updated: May 2, 2026

CarouselCraft (“we”, “us”, or “our”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and what rights you have over your data.

1. Information we collect

Account information. When you sign up, we collect your email address and the password you choose (stored as a secure hash — we never see your plain-text password).

Uploaded photos. Photos you upload to create carousels are stored on our servers for as long as your account is active. You can delete individual projects or your entire account at any time.

Usage data. We collect anonymized data about how you use the service — pages visited, features used, errors encountered — to help us improve CarouselCraft. This data cannot be used to identify you individually.

2. How we use your information

To operate the service. Your email is used for authentication and to send you important account notices (password resets, billing receipts). We will not send marketing emails without your explicit consent.

To generate carousels. Photos you upload are passed to the Anthropic API (Claude) solely to generate captions and copy for your carousel. Anthropic's data handling is governed by their own privacy policy.

To improve CarouselCraft. Aggregated, anonymized usage data helps us understand which features are most valuable and where the product can be improved.

3. Third-party services

Supabase — We use Supabase for database storage and authentication. Your data is stored in Supabase-managed infrastructure. See supabase.com/privacy.

Stripe — All payment processing is handled by Stripe. CarouselCraft never sees or stores your full card number. See stripe.com/privacy.

Anthropic API — Uploaded photos and prompts are sent to Anthropic's Claude API to generate your carousel copy. See anthropic.com/privacy.

4. Data retention and deletion

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data and uploaded photos within 30 days, except where we are required by law to retain it longer.

To request deletion of your data, email us at lina.schwartz@jocis.com with the subject line "Data Deletion Request" and we will process your request within 14 business days.

5. We do not sell your data

CarouselCraft does not sell, rent, or trade your personal information to any third party for marketing purposes. Full stop.

6. Cookies

We use only strictly necessary cookies — a session cookie to keep you logged in. We do not use tracking or advertising cookies.

7. Changes to this policy

If we make material changes to this policy, we will notify you by email at least 14 days before the change takes effect. Continued use of the service after that date constitutes acceptance of the updated policy.

8. Contact

Questions about this policy? Email us at lina.schwartz@jocis.com.