Legal
CarCrafter Privacy Policy
Last updated: July 5, 2026
CarCrafter (“we,” “us,” “our”) operates carcrafter.app (the “Service”). This Privacy Policy explains what information we collect, how we use it, and what rights you have. By using CarCrafter, you agree to the practices described here.
1. Information We Collect
Account Information
When you sign up, we collect your email address and authentication credentials, managed through our authentication provider, Supabase.
Vehicle Photos
When you upload a photo of your car to generate a render, we collect and process that image. Vehicle photos may contain incidental personal information, such as visible license plates or background details. We strip identifying metadata (EXIF data, including location data) from uploaded images before processing.
Payment Information
When you purchase credits, payment is processed by Stripe. CarCrafter does not receive, see, or store your raw payment card details. We do retain records of your transaction (amount, date, package purchased) for accounting and support purposes.
Render and Build Data
We store the renders you generate, the modifications you select, and any builds you save to your garage, including parts list results associated with those builds.
Usage and Analytics Data
We collect data about how you use the Service — pages visited, features used, and render activity — to understand product usage and improve CarCrafter.
2. How We Use Your Information
We use the information we collect to:
- Generate vehicle modification renders you request
- Find and display relevant parts listings for your selected modifications
- Process payments and manage your credit balance
- Provide customer support (including resolving account or render issues)
- Improve and troubleshoot the Service
- Communicate with you about your account, including product updates and, where you have not opted out, occasional feedback requests or marketing messages
3. How We Share Your Information
We do not sell your personal information. We share information with the following third-party service providers, solely to operate the Service:
| Provider | Purpose | What's shared |
|---|---|---|
| OpenAI | Generates your vehicle renders | Your uploaded vehicle photo and selected modification details are sent to OpenAI's API for image generation |
| Stripe | Processes payments | Payment and billing information necessary to complete your purchase |
| Supabase | Database and authentication hosting | Account data, render data, and saved builds |
| Vercel | Application hosting | Standard web request data necessary to serve the Service |
OpenAI
Purpose: Generates your vehicle renders
What's shared: Your uploaded vehicle photo and selected modification details are sent to OpenAI's API for image generation
Stripe
Purpose: Processes payments
What's shared: Payment and billing information necessary to complete your purchase
Supabase
Purpose: Database and authentication hosting
What's shared: Account data, render data, and saved builds
Vercel
Purpose: Application hosting
What's shared: Standard web request data necessary to serve the Service
Each provider is contractually and technically limited to using this data only to provide their service to us. We may also disclose information if required by law, or to protect the rights, property, or safety of CarCrafter, our users, or others.
4. Data Retention
We retain your account data, uploaded photos, and render history for as long as your account is active. You may delete individual saved builds at any time from your garage. To request full account deletion, contact us at the email below, and we will delete your personal data within a reasonable timeframe, except where retention is required for legal or accounting purposes (such as transaction records).
5. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and associated data
- Opt out of marketing communications at any time (a link to unsubscribe is included in marketing emails, or you can contact us directly)
- Object to or restrict certain processing of your data
Residents of the EU/EEA and UK have rights under the GDPR; residents of California have rights under the CCPA/CPRA, including the right to know what personal information is collected and the right to non-discrimination for exercising your privacy rights. To exercise any of these rights, contact us at the email below.
6. Security
We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS) and access controls on our database (Supabase Row Level Security). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Children's Privacy
CarCrafter is not directed at, and is not intended for use by, children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
8. Cookies and Tracking
We may use cookies or similar technologies for basic functionality (such as keeping you signed in) and analytics purposes. You can control cookies through your browser settings, though disabling them may affect Service functionality.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Last updated” date above, and, where appropriate, through direct notice (such as email).
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise any of your rights, contact us at: