Legal
Privacy Policy
CraftedSoul is a small handmade-goods studio. We collect the minimum we need to take your order, deliver it, and support you afterwards — nothing is sold to anyone.
Last updated 7 August 2026
What we collect
Only what an order actually needs:
- Account details — your name, email address and, if you provide it, a phone number. Your password is stored only as a salted hash; we never see it.
- Delivery addresses — the addresses you save, so you do not have to retype them. A copy is snapshotted onto each order so past orders stay accurate if you later edit or delete the address.
- Order history — what you bought, what you paid, and the delivery and payment status.
- Content you upload — review photos, and reference photos attached to a custom sketch request.
- A session cookie — a single sign-in cookie so you stay logged in. It is HTTP-only and same-site, and it expires after 24 hours.
We do not run advertising or third-party analytics trackers on this site, and we do not build advertising profiles.
Payment information
Card and UPI details are handled entirely by our payment provider, Razorpay, on their own systems. They never reach our servers and we never store them. We keep only the payment reference and the amount so we can match a payment to your order and issue a refund if needed.
Who we share it with
Only the parties needed to fulfil your order:
- Razorpay — to take payment and process refunds.
- Delivery partners — your name, address and phone number, so the parcel can reach you.
- Our email provider — to send order confirmations, delivery updates, email verification and password resets.
- Cloudinary — which hosts the images shown on the site, including photos you upload.
- An independent seller, if you buy something they made - a seller sees the shipping name on an order containing their product, so they know which piece to make and pack. They do not see your address, your phone number, your email, or your order total - the full address stays with us, and we arrange the delivery.
- An independent seller, if you commission a custom sketch - where we hand a commission to one of the vetted sellers on CraftedSoul, they receive your brief, your reference photos and your contact details so they can make the piece and reach you about it. This happens only for custom commissions, and only with sellers we have approved.
We do not sell or rent your personal information. We may disclose information if the law requires it.
If you sell on CraftedSoul
Applying to sell means giving us a little more than a shopper does, because we review every seller by hand and we have to be able to pay you.
- Your business name, the description and logo you write, and the town and state you work from. These are shown publicly on your storefront.
- Your contact phone number, used by us to reach you about your account and your orders.
- The photos of your work you submit with your application. These are review material for our team - they never become listings, and we keep them while your account exists so we can revisit an approval decision.
- Your UPI id, used to pay out what you earn. We deliberately do not ask for or store bank account numbers.
If your application is rejected, we keep it and its sample photos only as long as we need to answer questions about the decision, then remove them. Ask us any time and we will delete them sooner.
How long we keep it
Order records are kept as long as needed for accounting, tax and warranty purposes. You can ask us to close your account at any time; we will remove your profile and saved addresses, but past order records are retained where we are legally required to keep them.
Your choices
- View and edit your profile, saved addresses and order history from your account page at any time.
- Ask us for a copy of the personal information we hold about you.
- Ask us to correct anything inaccurate, or to delete your account.
- Transactional emails (order confirmations, delivery updates) are part of the service and cannot be turned off while an order is open.
Keeping it safe
The site is served over HTTPS. Passwords are hashed, sign-in attempts are rate limited and locked after repeated failures, and sessions can be revoked. No system is perfect, so please use a password you do not reuse elsewhere.
Children
This shop is not intended for children under 13, and we do not knowingly collect their information.
Changes to this policy
If we change how we handle your information we will update this page and the date above.
Contact us
Questions about your data, or want a copy or deletion? Email contact@craftedsoul.in and we will get back to you.