Scope
This policy applies to data collected through the Krafthaus website, workspace, workflow brief forms, workflow app demos, Decision Memo requests, and supporting product surfaces.
Data We Collect
- Account details such as name, work email, authentication identifiers, and workspace access state when you sign in.
- Billing and purchase records associated with sprint payments or credit purchases. Full payment card details are processed by payment providers, not stored by Krafthaus.
- Workflow or decision context you provide, including a trigger, owner, failure mode, desired handoff, question, evidence, attachments, and notes.
- Sprint scope and delivery records, including acceptance-case inputs and expected results, review status, correction notes, delivered records, artifact references, and acceptance timestamps.
- Basic technical metadata such as submission timestamp, browser or session state, and request source domain.
- Optional local browser state for workspace or console demos (stored on your device unless submitted).
How We Use Data
- To authenticate workspace access and maintain account state.
- To process sprint payments or credit purchases, allocate credits, and restore credits when applicable.
- To review, scope, and respond to workflow-app sprint briefs and Decision Memo requests.
- To prepare and deliver operational pilots, Decision Memos, records, and handoff details.
- To run agreed acceptance cases, document delivery and correction status, and provide the customer with delivered records and artifacts.
- To operate, secure, and improve reliability of the website, workspace, and Krafthaus product surfaces.
Retention
Account, purchase, workflow, scope, acceptance, and decision request records are retained only as needed for operational delivery, security, dispute handling, and accounting obligations. Retention may differ by record type and service provider. To request export or deletion of a workflow or decision submission, contact hello [at] krafthaus.app with the relevant workspace reference, sprint reference, or decision ID. Krafthaus will confirm what can be deleted and what must be retained for legal or accounting reasons.
Public website analytics
Approved public entry pages use free Cloudflare Web Analytics for aggregate visits, page views, referrers, countries, device and browser types, and loading performance. Cloudflare states that the service does not use cookies, local storage, or fingerprinting to identify visitors and does not log query strings.
Workspace, console, administrative, API, and private record routes are excluded; automatic single-page navigation tracking is disabled. The operator views aggregate traffic in a private portfolio dashboard. This report is not joined to workspace identities, workflow inputs, decision records, billing data, or cross-product identities.
See Cloudflare's Web Analytics explanation. Hosting and security logs are separate from this public traffic report.
Sharing
Krafthaus does not sell personal data. Data may be processed by service providers that help host the site, authenticate users, process payments, deliver email, monitor service health, and operate product workflows. Approved workflow or decision inputs may also be processed by Decide runtime systems when deterministic execution is requested.
Security
We use access controls and operational safeguards for workflow and decision request processing. The standard operational pilot is designed to work with representative data or approved metadata without production credentials. No system is guaranteed to be fully secure; do not submit credentials, payment data, or regulated sensitive personal information through public forms.
Contact
Questions or privacy requests: hello [at] krafthaus.app or @krafthaushq on X.