Privacy Policy

1. Who We Are

HeartCraft ("we", "us", "our") operates friendship.myheartcraft.com — a service that lets you create personalized virtual friendship day experiences and share them as links. Our parent brand is MyHeartCraft (myheartcraft.com).

For questions, contact us at: support@myheartcraft.com

2. What Data We Collect

• Friend's name & your name — entered by you to personalize the card and letter.
• Photo — one photo of you two together, stored to render the curtain-reveal exhibit in the Museum of Us.
• Letter content & bond details — the personal message you write and the friendship traits you select, stored to render the experience for the recipient.
• Payment data — processed securely by Razorpay and/or Paytm. We never store your card or UPI credentials.
• Session ID — a randomly generated identifier stored in localStorage to track your creation session. It is not linked to your identity.
• Usage analytics — page views, clicks, and interaction events collected via Meta Pixel (Facebook) and Microsoft Clarity, only if you consent.
• IP address & browser metadata — collected automatically by our hosting infrastructure for security and performance monitoring.

3. How We Use Your Data

• To generate and host the personalized friendship day card link you share.
• To process your one-time payment (₹199).
• To send you the shareable link after payment.
• To store and serve your photo in the Museum of Us exhibit.
• To improve the product using aggregated, anonymised analytics.
• To troubleshoot errors and monitor uptime.

We do not sell your data to third parties.

4. Cookies & Tracking

We use cookies and similar technologies for the following purposes:

• Strictly necessary — session management (localStorage), payment security. Cannot be disabled.
• Analytics (consent required) — Meta Pixel and Microsoft Clarity fire only after you click "Accept" in our cookie banner.

You can withdraw consent at any time by clearing your browser data or contacting us.

5. Third-Party Services

• Razorpay — payment gateway. Privacy policy →
• AWS S3 — photo storage (your uploaded photo is stored securely in a private S3 bucket and served only to render the friendship card experience).
• Meta (Facebook) — conversion tracking. Privacy policy →
• Microsoft Clarity — session recording & heatmaps. Privacy policy →

6. Data Retention

Friendship card data (names, letter, bond traits) is retained for as long as the shareable link is active — typically 6 months after creation. Your uploaded photo is retained for the same duration. Payment records are retained for 7 years for legal/tax compliance.

7. Your Rights

Depending on your jurisdiction (DPDP Act, GDPR, CCPA), you may have the right to:

• Access the personal data we hold about you.
• Request deletion of your data (including your uploaded photo).
• Withdraw consent for analytics at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@myheartcraft.com.

8. Updates to this Policy

We may update this policy from time to time. We will post the new version on this page with an updated "Last updated" date.