Skip to content
Crochet AI

Draft

Privacy policy

Last updated:

Draft. This document is a draft and must be reviewed by a lawyer before the public launch. Items in square brackets are still to be completed.

This policy explains which personal data Crochet AI processes, why, and what rights you have. It is a draft: a legal advisor will complete and review it before the public launch.

01Data controller

The controller is [company name and address to be completed]. For any privacy request you can write to [email address to be defined].

02What data we process

  • Account data: email address, language and preferences (units, US/UK terminology).
  • Photos you upload, including progress photos, after EXIF metadata has been removed.
  • PDF files you import: we read them only to create your project and delete them after the import.
  • Project content: answers to questions, generated patterns and their versions, notes, conversations with the tutor.
  • Technical and usage data: credits used, status and cost of processing jobs, security logs.
  • On this website: one technical cookie (NEXT_LOCALE) that remembers the language you chose. No profiling or advertising cookies.

03Why we process it

  • To provide the service you request (photo analysis, patterns, tutor, export): performance of a contract.
  • Security, abuse prevention and usage limits: legitimate interest.
  • Legal obligations, where applicable: legal obligation.
  • Training or improving models with your photos, patterns or conversations: only with your separate, optional consent. Without consent it doesn't happen.

04Providers and transfers

The necessary photos, the text extracted from PDFs you import and any other necessary text are sent to an external artificial intelligence provider (currently OpenAI) only to process your request. Data and files are stored on infrastructure we manage, in private storage.

[Full list of processors, storage locations and safeguards for any transfer outside the European Economic Area: to be completed.]

05How long we keep it

We keep your data while your account is active. If you delete a project or your account, we also delete the related photos and files. Imported PDFs are deleted after the import; a PDF that is uploaded but never imported is removed within 24 hours. Some accounting data about processing costs, not linked to your content, may be kept longer. [Exact periods: to be defined.]

06Security

Photos and PDFs private by default and reachable only through expiring links, per-user access control, EXIF metadata removal, encrypted connections.

07Your rights

You can ask for access, rectification, erasure, restriction and portability of your data, object to processing and withdraw any consent at any time. You can also lodge a complaint with a supervisory authority (in Italy, the Garante per la protezione dei dati personali).

08Children

[Minimum age to use the service and related safeguards: to be defined.]

09Changes

If we change this policy we will update the date at the top and, for important changes, let you know in the app.