Privacy Policy
Draft · 16 August 2026 · Crafted Co is in development
Crafted Co has not launched. This policy is published early so the intent is visible while the product is being built. The processor list, retention periods and data location will be confirmed from the shipped system, and the whole document reviewed, before anyone can sign up.
This policy covers the Crafted Co app, published by Crafted by Ellis. The website that describes it has its own, much shorter, website privacy policy.
1. Two kinds of information
Crafted Co is a business tool, so there are two distinct groups of people involved:
- You — the builder or trade business using the app. We are responsible for your information as described below
- Your clients — the homeowners and customers whose names, addresses and job details you enter. That information is yours; we hold and process it on your behalf and under your instructions
In data-protection terms you are the controller of your clients' information and we are your processor. Practically: we do not contact your clients, we do not market to them, and we do not use their details for anything except running the service for you.
2. What we collect about you
- Account details — name, email, business name, and your password in hashed form
- Your content — quotes, jobs, site photos, invoices, notes, and anything else you put into the app
- Technical data — device and app-version information, and error reports when something crashes, so faults can be fixed
3. What we do with it
- Run the service: store your work, sync it across your devices, show it to your team
- Support you when you ask for help
- Diagnose faults and improve reliability
- Send service messages — billing, security, and material changes to this policy
We do not sell your data, we do not sell your clients' data, and we do not use either to train AI models.
4. AI processing
Where you use an AI feature, the content needed for that request is sent to an AI provider, processed, and returned. It is not used to train the provider's models. The specific providers and the regions they process in will be listed here before launch.
5. Who else touches your data
We use third-party infrastructure to run the service — hosting, database, file storage, crash reporting and payment processing. The final list, and each provider's privacy policy, will be published here before launch. Every one of them is a processor acting on our instructions; none of them get your data for their own purposes.
We will also disclose information where the law requires it, and we will tell you when we are permitted to.
6. Where your data lives
Data location and any overseas transfers will be confirmed before launch, along with the safeguards that apply under Information Privacy Principle 12 of the Privacy Act 2020.
7. How long we keep it
While your account is open, we keep your content so you can use it. After you close your account, we delete it within a defined period that will be stated here before launch, except where we must keep records longer for tax or legal reasons. You can export your data at any time while the account is active.
8. Security
Data is encrypted in transit and at rest, access is restricted, and each organisation's data is isolated from every other organisation's. No system is perfectly secure, so if a breach affects you we will notify you and the Office of the Privacy Commissioner as the Privacy Act 2020 requires.
9. Your rights
Under the Privacy Act 2020 you can ask for a copy of the personal information we hold about you, ask us to correct it, and ask us to delete it. Email braden@craftedbyellis.com and we will respond within 20 working days.
If one of your clients asks us for their information, we will refer them to you — it is your record, and you are the controller of it.
If you are in the UK or EU, the equivalent UK/EU GDPR rights apply, including the right to complain to your supervisory authority.
10. Children
Crafted Co is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.
11. Changes
We may update this policy. Material changes will be notified in the app before they take effect, and the date at the top of this page will change.
12. Contact
Privacy questions: braden@craftedbyellis.com. Crafted by Ellis is the trading name of Braden Cole Ellis, a sole trader based in Hamilton, New Zealand.
Plain English:Your jobs, quotes and client details belong to you. We hold them so the app works, and that's all — we don't sell them, we don't market to your clients, and we don't train AI on your work. You can export or delete your data. If a client of yours wants their information, we'll point them at you, because it's your record.