This Privacy Policy explains how Craft Haus ("we", "us", or "our") collects, uses, and protects your information when you use First Pass — our macOS application, website, and related cloud services. By using First Pass, you agree to the practices described here.
1. Information we collect
Account information
When you create an account, we collect your email address. We use a passwordless "magic link" for sign-in, so we do not store a password for you. We associate your account with your plan, activation code, and credit balance.
Device and activation information
When you activate First Pass on a Mac, we store a device identifier derived from your hardware and a device name, so we can enforce your plan's seat limit and let you manage and deactivate your devices.
Content you submit
When you use a Cloud Feature, you upload image frames or other media for processing ("Your Content"). We process Your Content to generate the result you request.
Usage and billing information
We record credit usage (how many credits a job consumed) and subscription status. Payment information is collected and processed by Paddle, not by us (see "Payments" below).
2. How we use information
- To provide, operate, and maintain First Pass and its features;
- To authenticate you, manage your account, plan, seats, and credits;
- To process Your Content and deliver the results you request;
- To communicate with you about your account, purchases, and service updates;
- To detect, prevent, and address fraud, abuse, and technical issues;
- To comply with legal obligations.
3. Payments
Payments are handled by Paddle, our reseller and Merchant of Record. When you buy a subscription or credits, Paddle collects and processes your payment details and billing information underPaddle's privacy policy. We receive transaction and subscription details from Paddle (such as your email, plan, and status) but we do not receive or store your full payment card number.
4. Cloud AI processing and third parties
Cloud Features send Your Content to third-party AI model providers that perform the generation on our behalf. We share only what is necessary to produce your result. These providers process the data under their own terms and privacy practices. We do not sell Your Content, and we do not use Your Content to train our own models.
We also rely on the following categories of service providers:
- Cloud infrastructure and database hosting (for accounts, credits, and storage);
- Payment processing and tax (Paddle);
- Transactional email delivery (for magic-link sign-in and account emails);
- AI model providers (for Cloud Features).
5. Data retention
- Uploaded source frames are used only to produce your requested result and are automatically deleted from our processing storage shortly after the job completes (generally within about 24 hours).
- Generated results are stored in your account so you can retrieve them, until you delete them or your account is closed.
- Account, activation, and billing records are retained for as long as your account is active and as needed to meet legal, accounting, and fraud-prevention obligations.
6. Cookies and local storage
Our website uses your browser's local storage to keep you signed in between visits (your choice via "Keep me signed in") and to remember basic preferences. We do not use third-party advertising or cross-site tracking cookies. Paddle may set cookies necessary to complete checkout.
7. How we share information
We do not sell your personal information. We share information only with the service providers described above, when required by law or valid legal process, to protect our rights and users, or in connection with a business transfer (such as a merger or acquisition), subject to this Policy.
8. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls on our backend services. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To make a request, contact us at[email protected]. We will respond as required by applicable law. For payment-related data held by Paddle, you may also contact Paddle directly.
10. International transfers
We and our service providers may process your information in countries other than where you live. Where required, we rely on appropriate safeguards for such transfers.
11. Children
First Pass is not intended for children under 16, and we do not knowingly collect personal information from children.
12. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.
13. Contact
For privacy questions or requests, contact[email protected].