Privacy Policy

1. Scope and Contact

VerbCraft is the product available at https://verbcrafts.in. VerbCrafts.in is its website domain, not a separate product. This Privacy Policy covers the website, accounts, creator tools, billing, support and communications connected with the service.

For account, privacy or service requests, contact support@verbcrafts.in. Include your account email, the type of request and enough context for us to locate the relevant records. Do not send passwords, OTPs, complete card details or banking credentials. We may need to verify that you control the account before disclosing or changing personal information.

2. Information We Collect

Account information includes your name, email address, sign-in method and saved profile preferences. When you choose to complete a sales, support or billing form, we also receive the details you enter there, which may include company or creator information, website, job title, phone number, team size, messages and billing information. These fields are not all required for ordinary signup.

We process workspace and service data such as prompts, uploaded brand examples, generated scripts, hooks, captions, images, brand profiles, content calendar entries, reports, saved settings, plan entitlements, feature usage, and administrative actions affecting your account.

If media features are available to your account and you use them, this can also include uploaded photos, video and audio, transcripts, presenter or product assets, editing settings, consent confirmations and generated media. This policy describes data handling; it does not make a feature available or include it in your plan.

For login and registration activity, we may collect device type, operating system and version, browser and version, web or app platform, time zone, user agent, authentication method, session identifier, login result, and an approximate city, state, and country derived from the request network address.

We collect transaction metadata such as plan, amount, currency, payment status, billing period, invoice reference, Razorpay payment or subscription identifiers, refund status, and bank reference when returned by the payment provider. We do not store full card numbers, UPI PINs, or online-banking credentials.

3. How Information Is Collected

Information is collected when you create an account, sign in, submit a form, buy or cancel a plan, request a refund, contact support, upload content, generate an output, or otherwise use VerbCraft.

We also collect technical and usage information automatically through essential browser storage, server logs, Microsoft Clarity, Meta Pixel, Sentry, Vercel performance tooling, and similar technologies used for authentication, security, diagnostics, product analytics, advertising measurement, and conversion attribution.

We do not request GPS permission for login analytics. Network-based location is approximate and may be inaccurate when a mobile network, VPN, corporate network, or proxy is used. Authentication activity stores a keyed network-address hash rather than the raw address; limited infrastructure or security logs may separately process network addresses for fraud prevention and service protection.

4. Why We Use Information

We use information to create and secure accounts, authenticate users, provide dashboard access, personalize creator workflows, generate requested content, enforce plan limits, process payments and refunds, issue invoices, deliver emails, respond to support, and maintain service records.

We also use information to prevent fraud and abuse, investigate security events, diagnose errors, measure service reliability and feature adoption, attribute advertising conversions, improve product performance, and comply with legal, tax, accounting, and consumer-protection obligations.

Where processing depends on your consent, you may withdraw that consent for future processing. Withdrawal does not affect processing already completed and may limit features that require the relevant information.

5. AI Processing and Your Content

For script creation, relevant niche and topic information, language preferences, brand examples, previous content or feedback and creative instructions may be sent to Anthropic to generate the requested result. Generation records can include the inputs, outputs, usage and error information needed to save your work and operate the service.

Where enabled media tools are used, relevant scripts, photos, audio or video may be sent to the provider required for that operation. Submit another person's likeness, voice, personal information or copyrighted material only when you have the necessary rights and permission. Avoid confidential or sensitive information that the task does not require.

Provider retention and use of submitted content depend on the specific service, configuration and contractual terms. We do not make a blanket promise that all providers immediately delete content or never use it for model improvement. Contact support before submitting material that requires a particular retention, location or training restriction.

AI outputs can be inaccurate or unsuitable. You remain responsible for reviewing outputs before publication and for ensuring that your inputs and use of outputs comply with applicable law, platform rules, intellectual-property rights, advertising standards, and contractual duties.

6. Cookies, Analytics, and Advertising

VerbCraft uses cookies and browser storage that are necessary for authentication, session continuity, preferences, security, and core functionality. Disabling them may prevent parts of the service from working.

Microsoft Clarity helps us understand page interaction and usability; Sentry helps diagnose errors; Vercel tooling measures service performance; and Meta Pixel helps measure visits, sign-up activity, campaign attribution, and advertising effectiveness. These providers may process identifiers, device information, page activity, referral data, and cookie information under their own terms and privacy notices.

You can use browser controls, device settings and applicable provider controls to limit storage or advertising measurement. Browser restrictions do not necessarily prevent every server-side event or erase information previously collected. Contact support for privacy questions or to withdraw consent where processing relies on it. This policy does not mean that a cookie preference centre is available in the product.

Marketing messages provide an unsubscribe option; you can also ask support to stop marketing to your address. Unsubscribing from marketing does not cancel a subscription or stop necessary OTP, security, payment, refund and account notices. An advertising lead submission and an account registration are separate actions; lead attribution and follow-up records may exist before an account is created.

7. Sharing and Service Providers

We do not sell personal data. We share only the information reasonably needed with providers that support cloud hosting, databases, authentication, payments, email delivery, AI processing, analytics, advertising measurement, error monitoring, security, and customer support.

Core integrations include Vercel for web hosting/performance, MongoDB for stored service records, Upstash for caching and queued work, Razorpay for payments, Resend for email, Google for Google sign-in, and Anthropic for AI scripts. Meta, Microsoft Clarity and Sentry support the measurement and diagnostics described above. These roles do not mean that every provider receives every category of your data.

Feature-dependent integrations include Apify for content research, Cloudflare R2 for media storage, Sarvam and ElevenLabs for speech processing, HeyGen for video generation and OpenAI for certain media operations, where those features and provider integrations are enabled. Background processing can run on Render. A hidden promotional section does not itself delete data from a feature you previously used.

Providers and their infrastructure may process data outside India. The processing location and applicable safeguards depend on the provider and service configuration. We do not promise that all data stays in India or that choosing an Indian language changes its processing location.

We may disclose information where required by law, to respond to lawful requests, protect users or VerbCraft, investigate fraud or misuse, enforce our terms, or support a merger, acquisition, financing, restructuring, or transfer of the service subject to appropriate notice and safeguards.

8. Retention and Deletion

We retain personal data only for as long as reasonably needed for the stated purposes, account operation, security, dispute resolution, fraud prevention, and legal, tax, accounting, or regulatory obligations.

Authentication activity has a configurable expiry policy; the application's default is 180 days, not a guaranteed maximum for all logs or providers. OTPs and temporary records expire separately. Retention for payment, tax, security, support and provider records depends on the purpose, relevant obligations and any unresolved investigation or dispute.

Deleting workspace or account data does not by itself delete records independently held by payment, email, analytics or AI providers. Backups and separately maintained logs may follow different retention schedules. Contact support if a request needs review beyond the account-deletion control; we do not promise immediate erasure from every system.

The account-deletion flow is available in Settings and requires a separate email OTP and confirmation. It collects your deletion feedback and attempts to cancel a linked subscription before deleting linked account records. If subscription cancellation fails, deletion is blocked and an error is shown, so you can contact support without first losing access. Save content you need before confirming: completed account deletion is intended to be permanent.

An administrative notification of the deletion attempt or completion, including a masked account email, deletion feedback and cancellation outcome, can remain for support, investigation and accountability. Separately retained authentication activity may still contain the account email under its retention schedule. Deletion is therefore not a promise that every trace of your account or all provider-held records disappears.

9. Security

We use reasonable technical and organizational safeguards, including HTTPS, authentication controls, restricted administrative access, secret management, monitoring, and infrastructure protections. No online service can guarantee absolute security.

You must protect your login credentials and devices, avoid sharing OTPs or reset links, and notify support@verbcrafts.in promptly if you suspect unauthorized access or misuse.

10. Your Rights and Choices

Subject to applicable law, you may ask for information about your personal data, request access, correction, completion, updating, or erasure, withdraw consent, unsubscribe from marketing, or raise a grievance. We may verify your identity before acting on a request.

Update editable profile details through Settings. For information you cannot change there, data access or deletion beyond the account control, email support@verbcrafts.in with the subject Privacy request and identify the information or action concerned. Do not attach identity documents unless support explains why additional verification is needed and how to provide it safely.

Some requests may be limited where retention or processing is necessary for legal compliance, payment and tax records, security, fraud prevention, dispute resolution, or the establishment and defense of legal claims. If you are dissatisfied with our response, you may use the remedies available under applicable data-protection and consumer law.

11. Children

VerbCraft is intended for adults and is not designed for anyone under 18. We do not knowingly offer accounts to children. If you believe a child has provided personal data, contact us so we can review and take appropriate action.

12. Changes to This Policy

We may update this policy when the service, providers, or legal requirements change. We will update the date above and provide additional notice when a material change requires it. Continued use after an effective update is subject to the revised policy, without limiting rights that require separate consent under applicable law.