← Back

Privacy Notice

Last updated: 6/21/2026

1. Who we are

CoverCraft is operated by CoverCraft Labs, which acts as the data controller for personal data processed through the service.

2. What we collect

Payment data (card number, billing address) is collected and stored directly by Paddle — we never see or store it.

3. Why we use it

4. Who we share it with

5. Retention

Your generated letters and account data are kept until you delete them or close your account. Logs are kept for up to 90 days.

6. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your data, and to object to or withdraw consent. You can delete individual letters in-app or contact us to delete your account.

7. International transfers

Our service providers may process data outside your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Security

We use industry-standard technical and organizational measures, including TLS encryption in transit, access controls, and row-level security in the database.

9. Cookies

We use only essential cookies needed to sign you in and keep you signed in. We do not use marketing cookies.

10. Contact

For privacy questions or to exercise your rights, contact us via the support channel listed in your Paddle receipt.