CraftWeb (CRAFT WEB, LLC, "CraftWeb", "we", "us") builds websites, online ordering and messaging tools for restaurants. This policy explains what information we collect, how we use it, and how you can ask us to delete it. It covers restaurant owners who use the CraftWeb Owner Portal, their customers ("guests"), and visitors to craftweb.ai and restaurant websites we host.
1. Information we collect
- Restaurant owners and staff: name, email, phone number, login details, and restaurant details such as menu, hours, address and branding.
- Guests: name, phone number, email, order details and messages you send to a restaurant through its website.
- WhatsApp messages: if you message a restaurant that uses CraftWeb, we receive your WhatsApp phone number, profile name, message content and delivery status (see section 3).
- Payments: card payments are processed by Stripe. We receive only the card brand, last 4 digits, amount and payment status. We never store full card numbers.
- Website use: IP address, browser and device type, and pages viewed, collected through cookies and analytics.
2. How we use it
- To run restaurant websites, online ordering and the Owner Portal
- To deliver orders and messages to restaurants, and send their replies
- To send order updates (such as "order ready") by WhatsApp, SMS or email, when you opt in
- To provide support, keep our services secure and prevent fraud
- To meet legal, tax and accounting requirements
We do not sell personal information or use it for advertising.
3. WhatsApp and Meta data
CraftWeb is a Tech Provider on Meta's WhatsApp Business Platform. A restaurant can connect its WhatsApp Business account to CraftWeb from the Owner Portal. When it does, Meta shares with us:
- The restaurant's WhatsApp Business account ID, phone number, display name, message templates, and an access token that lets us send and receive messages for it
- Messages between the restaurant and its guests, with the guest's WhatsApp phone number, profile name and delivery status
We use this data only to show conversations to the restaurant, send its messages and order updates, and keep the connection working and secure. We never use it for advertising, never sell it, and never share one restaurant's data with another. Access tokens are encrypted and stored securely. We never ask for Facebook passwords or WhatsApp verification codes.
A restaurant can disconnect WhatsApp at any time. We then stop processing its messages and delete its access token and WhatsApp data within 30 days.
5. How long we keep it
We keep information only as long as needed to provide our services or meet legal requirements. WhatsApp data is deleted within 30 days after a restaurant disconnects. Order records are kept for 2 years for tax purposes.
6. How to delete your data
Email privacy@craftweb.ai with the subject "Delete my data". Include the phone number or email you used, and the restaurant's name if you are a guest. We will confirm your request and delete your data within 30 days, except records the law requires us to keep.
Restaurant owners can also delete orders and messages, or disconnect WhatsApp, from the Owner Portal.
7. Security
We protect your information with encryption, access controls and secure hosting. No system is completely secure, but we work to keep your data safe.
8. Children
Our services are not meant for children under 13, and we do not knowingly collect their information.
9. Changes
We may update this policy. We will post changes on this page and update the date above.
10. Contact us
CRAFT WEB, LLC
Email: privacy@craftweb.ai
Website: https://craftweb.ai