Privacy policy
How CraftKaro looks after your personal data, in line with India’s Digital Personal Data Protection Act, 2023.
Last updated 4 October 2026
What we collect and why
- Account: your name, email address and (if you use it) mobile number — to sign you in and send order updates.
- Orders: delivery address, phone number and what you bought — to print, deliver, invoice and support your order, and to meet tax law.
- Designs and uploads: the photos and text you add in the Studio — to show your design and print it. We don’t use your photos for anything else.
- Technical data: IP address, device and browser details and security logs — to keep the site safe and prevent fraud (for example, cash-on-delivery abuse).
Who we share it with
Only the services we need to run the shop, each for its own task:
- courier partners (name, address, phone) to deliver your parcel;
- Razorpay, our payment gateway, when you pay online — your card, UPI or bank details go straight to Razorpay; we never see or store them;
- our email and hosting providers, and secure file storage for your uploads;
- Google, only if you choose “Continue with Google”, to confirm who you are;
- a bot-protection check (Cloudflare Turnstile) when you request a sign-in code;
- authorities, where the law requires it.
We never sell your personal data.
How long we keep it
Order and invoice records are kept for the period tax law requires (currently 8 years). Photos uploaded without being saved in a design or order are deleted automatically after about 30 days. You can delete saved designs at any time from My designs.
Your rights
You can ask to see, correct or delete your personal data, or withdraw consent for marketing, by contacting us at through the Contact page. Some records (such as invoices) must be kept by law even if you close your account.
Cookies
We use essential cookies to keep you signed in and remember your cart. We don’t use advertising cookies.
Contact
Questions or complaints about privacy: through the Contact page.