Privacy Policy

Who we are

This website and the Collectraft early-access waitlist are operated by Shaik Shoaib, operating as Collectraft, based in Hyderabad, Telangana, India. Collectraft is a brand name, not a separate legal entity: the operator is an individual sole proprietor, and there is no incorporated entity behind it.

In this policy, “we”, “us” and “our” mean Shaik Shoaib, operating as Collectraft. We decide what information this site collects and why, which makes us the business responsible for it under the US state privacy laws described below.

General questions: hello@collectraft.com. Privacy questions and requests about your information: privacy@collectraft.com.

What we collect

What you type into the waitlist form

• Your email address. Required. It is the only thing we need in order to contact you about early access.
• Your business or agency name. Optional.
• Your role. Optional, chosen from a short list.

The form also records which page you submitted it from and any campaign tags in the link you arrived through (the utm_source-style parameters), so we can tell which version of the page people responded to. There is one hidden field in the form that people never see; it exists to catch automated spam submissions and is not stored.

A note on how this works, because it affects where your information goes: the form posts directly from your browser to a Google Apps Script endpoint that writes a row into a Google Sheet we control. Our own website server never receives the contents of the form.

Server and log data

Our hosting provider records ordinary technical information when a page is served: the requesting IP address, the browser and operating system reported by your browser, the page requested, and the time of the request. This is standard server logging used to keep the site running and to investigate abuse or faults. We do not use it to build a profile of you, and we do not combine it with your waitlist entry.

What we do not collect

• No accounting data. We are not connected to QuickBooks Online, Xero or any other system.
• No invoices, customer lists, payment information or financial records of any kind.
• No payment or card details. Nothing on this site charges you.
• No advertising, analytics or session-recording data. See Cookies and tracking.

Why we use it

• To email you about early access. This is the reason the waitlist exists: to tell you when a spot opens, to ask what you need from the product, and to let you know when it launches.
• To understand demand. We look at how many people sign up, what kind of businesses they run and which page they came from, so we know whether to keep building this.
• To keep the site working and secure. Server logs, and the anti-spam field on the form.
• To honour your opt-out. When you tell us to stop emailing you, we keep a record of that so we do not email you again by mistake.

We do not use your information for automated decision-making, profiling, advertising, or anything else not listed here. If that changes, we will update this policy and, where the change is material, tell you before it takes effect.

Who we share it with

We share personal information only with the service providers listed below, only so they can perform services for us, and only for the purposes described above.

• Google LLC — Google Apps Script and Google Sheets. This is where waitlist signups are stored, and it is where your email address, business name, role and campaign tags live.
• Vercel Inc. — website hosting and content delivery. Vercel serves the pages and keeps the server logs described above.

That is the complete list as of the date at the top of this page. We have not yet chosen an email sending provider; when we do, we will add it here before we use it to send you anything. We may also disclose information if we are legally required to, or to protect our rights, safety or property, or those of others.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done either in the twelve months before the date at the top of this page. We do not exchange your information for money or for anything else of value, and we have no advertising partners.

Cookies and tracking

This site sets no cookies. It contains no advertising or cross-site tracking cookies, no advertising pixels, no analytics tags, and no session-recording or heatmap tools. There is no chat widget. The fonts are served from our own domain rather than fetched from a third party, so loading a page does not tell anyone else that you visited.

Because there is nothing to consent to, this site does not show a cookie banner. If we ever add anything that tracks you, we will update this section and put the appropriate controls in place before it goes live.

How long we keep it

We keep your waitlist entry until you opt out of our emails or ask us to delete it, or until we decide not to launch the product — whichever comes first. We are not holding it on an open-ended “just in case” basis.

How to opt out

There are three ways, and all of them work the same:

• Reply to any email we send you with the word “unsubscribe”. This is the simplest route, and the instruction is printed in the footer of every email.
• Write to hello@collectraft.com.
• Write to privacy@collectraft.com.

Opt-outs are processed by a person rather than by an automated system, so allow a little time. We will honour your request within 10 business days, and in practice much sooner. You do not need an account, a password or a reason, and there is nothing to pay.

What we keep afterwards

When you opt out or ask for deletion, we stop emailing you and keep a minimal suppression record — in practice, your email address and the date you opted out. We keep it for one reason: so that if your address is ever submitted again, we can recognise it and keep honouring your opt-out. That record is never used to contact you. You can ask us to delete it too, but if you do, we lose the ability to catch a future email to that address before it goes out.

Server logs are kept for a short period by our hosting provider and then discarded.

Where it is processed

We operate from India, and our service providers operate in the United States. Your information may therefore be stored and processed in India and the United States, and may be accessed by us from India. Privacy laws in these countries differ from one another and from those where you live.

Your rights

If you live in California

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to:

• Know what personal information we have collected about you, where we got it, why we collected it, and who we have disclosed it to.
• Delete the personal information we hold about you, subject to the narrow exceptions the law allows.
• Correct personal information about you that is inaccurate.
• Opt out of the sale or sharing of your personal information. As explained above, we do not sell or share personal information, so there is nothing to opt out of — but you can still send us the request and we will confirm that in writing.
• Limit the use of sensitive personal information. We do not collect any sensitive personal information as that term is defined in the CCPA.
• Not be discriminated against for exercising any of these rights. We will not refuse you access to the waitlist, delay your place in it, or treat you differently because you made a request.

You may use an authorised agent to make a request on your behalf. We will ask the agent for written proof that you authorised them, and we may ask you to confirm it directly.

We will confirm receipt of your request within 10 business days and respond within 45 calendar days. If we need more time we will tell you why, and we may extend by a further 45 days, as the law permits.

If you live in another US state with a privacy law

A number of other states — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana, among others — give residents broadly similar rights to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising, sale and profiling. Some also give you the right to appeal if we turn a request down.

You do not need to work out which law applies to you. Send your request to privacy@collectraft.com and we will handle it the same way we handle a California request, using the same process and the same timelines described above.

If you are in India

We operate from India, so the Digital Personal Data Protection Act, 2023 applies to how we handle your personal data. Under that Act you may ask us for a summary of the personal data we process about you and what we do with it, ask us to correct or complete data that is inaccurate or incomplete, and ask us to erase personal data we no longer need for the purpose we collected it for. You may also withdraw consent you have given, at any time, as easily as you gave it — replying to any email from us with the word “unsubscribe” does exactly that.

If you are unhappy with how we have handled a request, write to our grievance contact at privacy@collectraft.com and we will respond. If you are still not satisfied, the Act allows you to complain to the Data Protection Board of India.

How to make a request

Email privacy@collectraft.com. Tell us what you would like us to do — know, delete, correct, opt out — and send it from the email address you signed up with, or tell us which address your request is about.

We will only ask for enough information to be reasonably sure the request is yours, which in practice means confirming the email address. We will not ask you to create an account, and there is no charge.

If you only want to stop receiving emails, you do not need to send a formal request at all. Reply to any email we send you with the word “unsubscribe”, or write to hello@collectraft.com. We will honour it within 10 business days.

Global Privacy Control

We honour the Global Privacy Control signal. If your browser or an extension sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information for that browser.

In practice the signal changes nothing about what we do, because this site has no advertising or tracking technology and we do not sell or share personal information in the first place. We are telling you this so you know the signal will not be ignored if that ever changes.

Not directed to children

This site is meant for people acting on behalf of a business, and it is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, email privacy@collectraft.com and we will delete it.

Who this site is for

We are not set up to meet the requirements that apply to offering services to people in those regions, so we do not market to them and we are not seeking signups from them. If you joined the waitlist from one of those regions and would like your entry removed, email privacy@collectraft.com and we will delete it.

Product preview

When the product launches it will handle a different and more sensitive category of information — your invoices, your customers and your payment records. That will be covered by a separate privacy notice and a separate set of data processing terms, which you will be asked to review before you connect anything. This policy covers only the website and the waitlist.

Changes to this policy

If we change this policy we will update the “Last updated” date at the top of the page. If the change materially affects how we use information we already hold about you, we will email the address on your waitlist entry before the change takes effect.