Privacy Policy

Who is responsible and how to contact us

CRAFTEDWITHLOVE PRIVATE LIMITED, 110, 110/1 KK Nagar, Kasipalayam, Erode, Tamil Nadu 638009, India. GST: 33AAKCC3439J1ZL.

For privacy questions, corrections, complaints, or deletion requests, email [email protected]. You may also write to our postal address above.

Information we collect

Depending on your interaction with us, we collect:

• Contact and messaging details: your name, phone number, email, Instagram or WhatsApp account identifier, and available profile information.
• Enquiries and order details: messages, attachments or media references, design requirements, reference images or files you share, quotations, approvals, products, quantities, and customer-service history.
• Delivery details: shipping address, country, postal code, courier, and tracking information.
• Payment and invoice details: order value, payment-link and transaction references, payment status, and billing information. Payment providers process payment credentials; our order console does not collect your card PIN, UPI PIN, or banking password. Please do not send these in messages.
• Technical and security information: account access records and request information, such as IP address and browser details, processed by the services that host or secure our systems.

Why we use this information

We use customer design references to assess and fulfil the requested service. We do not publish identifiable customer photos, private messages, or personalised designs in our catalogue or advertising without permission.

• Answer enquiries, provide product information, and prepare design-dependent quotations.
• Confirm designs and orders, produce customised items, arrange delivery, and provide tracking or support.
• Create invoices, request and verify payments, manage refunds or disputes, and keep required business records.
• Protect our systems, prevent misuse, and meet applicable legal obligations.

Connected messaging and AI-assisted replies

When enabled, our authorised Instagram integration receives messages and related events for our business account and allows us to manage enquiries in our private console. WhatsApp enquiries may be handled in WhatsApp or through a connected business messaging integration when that integration is active.

We use OpenRouter and the free AI model providers selected by its free-model router, to prepare owner-reviewed drafts and classify routine enquiries for automatic replies when enabled. Automatic replies use saved business facts; custom quotes, payment verification, complaints and uncertain requests are held for owner review. Payment details and requests require owner review before sending. The selected enquiry, limited conversation context, and relevant catalogue and business information may be sent to these services. Personal information included in that message text may therefore be processed by them. Full order records, shipping addresses stored in orders, and private product photos are not automatically included in AI requests.

Routine replies and order-intake prompts may be sent automatically when enabled. Customer order intake collects name, phone number, shipping details, optional email, gift instructions and other requested order details in our private order console. These structured intake replies are processed directly by our application rather than sent to the AI classifier. An order request is saved for business review; it does not by itself confirm payment or production. You can ask for a human review and ask us not to use AI to prepare a response to your enquiry. Please avoid sending unnecessary sensitive information.

Who receives information

We share information as needed with people and services supporting your enquiry or order:

• Authorised business personnel handling customer support, production, payments, and delivery.
• Meta for Instagram and WhatsApp communications, subject to the features you use.
• Cloudflare for application hosting and security, and Supabase for business data, authentication, and file storage.
• OpenRouter and its selected free AI model provider for AI-assisted drafts and routine enquiry classification when automatic replies are enabled.
• Razorpay or another payment service you choose when processing a payment, and couriers when arranging shipment.
• Authorities, advisers, or other recipients when disclosure is required by law or necessary to handle a dispute or protect legal rights.

We do not sell customer personal information. Service providers also have their own privacy notices and practices. Information may be processed outside India where those providers or delivery services operate.

Retention and security

We retain information for as long as needed for the relevant enquiry, order, delivery, customer support, accounting, legal obligations, and dispute resolution. We consider whether the order is complete, support is still needed, a record must legally be retained, or a deletion request can be fulfilled.

Our console restricts access to approved business users. Connected Instagram access tokens are encrypted, and access is time-limited. These measures reduce risk but cannot guarantee complete security.

Deletion requests are reviewed by the business; this policy does not promise an automatic deletion schedule. Information that must be retained for a specific legal or business obligation is restricted to that purpose rather than used for unrelated activity.

Your choices and data-deletion requests

Email [email protected] with the subject "TreeD privacy request" or "TreeD data deletion request". Identify the contact address, phone number, or Instagram username you used with us, and describe what you want accessed, corrected, or deleted. Include an order reference only if relevant. Do not send passwords, OTPs, payment PINs, or identity documents unless we separately explain why a limited verification step is necessary.

We may ask for proportionate information to verify that the request relates to you. We will explain the outcome, any information we need to retain, and the reason. You may also ask to withdraw consent where our processing relies on it, stop optional marketing, or raise a privacy complaint using the same email. Some services may no longer be possible if the information needed to fulfil them is removed.

Removing a business integration in Meta stops the access controlled by that platform setting. It does not automatically delete messages, invoices, or orders already held by our business. Please contact us to request deletion of those records. Records separately held by Meta, a payment provider, or another service are also subject to that provider’s procedures.

Children and other people’s information

Our ordering services are intended for adults. If you are under 18, ask a parent or guardian to contact us and manage the order. If you provide a reference photo or other information about another person, including a child, ensure you have the authority and any necessary permission to share it for the requested design. Contact us if you believe information has been shared without appropriate permission.

Cookies and third-party services

The private owner console uses essential authentication cookies. Meta, payment pages, and other third-party services may use their own cookies when you visit or sign in to them. Their notices explain those practices.

Policy updates

We may update this policy when our services or data practices change. The published page will show its last-updated date. Contact [email protected] if you have questions about a change.