Privacy policy
What we collect, where it lives, who processes it, and how to ask about it.
Draft for the preview release. Final service terms will be confirmed before accounts, publishing, and paid checkout open.
01What this covers
This policy describes what Cravelin collects when you browse, sign in, publish a launch, or book a placement, and which services process it on our behalf. We collect the minimum the product needs and nothing for resale.
02Your account
Signing in with Google or GitHub shares your name, email address and profile picture with us. We store those to run your account, show your maker profile, and contact you about your launches and orders. We do not receive your password.
Anything you publish — launches, comments, votes and your maker profile — is public by design. Drafts stay private to your account.
03Payments and orders
When you book a placement we keep an order record: what you bought, the weeks, the amount, the status, your account email, and the identifiers the payment provider gives us for the payment and any refund. We keep order records after a booking ends because they are our revenue history.
The payment itself is handled by Dodo Payments as merchant of record. Your card details, billing address and tax information go to Dodo directly, never to Cravelin's servers, and are governed by Dodo's own privacy policy. Dodo emails you the receipt and invoice.
04Where your data is processed
Account, launch and order data is stored in a Postgres database hosted by Supabase. Sessions and rate-limit counters are held briefly in Upstash Redis. Images you upload are stored in Cloudflare R2 and served from our CDN. The site itself runs on Vercel. Each of these providers processes data on our instructions under its own terms.
Uploaded images are resized and stripped of metadata such as location before they are stored.
06Page requests and third-party content
Loading a website sends network information, such as your IP address and browser details, to the services delivering it. We use your IP address to rate-limit abuse and for nothing else. Product images and embedded videos may make requests to the services that host them, under those services' policies.
07Your choices
You can edit or delete your launches and profile details at any time from your dashboard, and clear locally stored preferences through your browser. To delete your account and the personal data attached to it, email us from the address on the account; order records are retained as required for accounting, with personal details removed where the law allows.
08Privacy questions
Email contact@cravelin.com with questions about information you have shared with Cravelin. Describe the information and what you would like us to do, without sending passwords or card details.