This Privacy Policy describes how Vishnova Labs LLC, a Texas limited liability company ("we," "us," or "our") collects, uses, discloses, and protects information when you use Wishcraft at wishcraft.to.
Introduction
We respect your privacy. This policy explains what information we collect, why we collect it, how we share it, how long we keep it, and the choices you have. By using Wishcraft, you agree to the practices described here. If you do not agree, please do not use the service.
Information We Collect
Account Information
When you register or sign in, we collect information provided through Firebase Authentication, including your name, email address, and profile photo when you use Google sign-in. We also record which authentication provider you used and the date your account was created.
Usage Data
We collect metrics needed to operate billing and fair-use policies, such as the number of tools you have generated, how many times you run tools within a billing or calendar period, your subscription status, your plan type, and general patterns of feature usage so we can improve reliability and product design.
Tool Data
When you describe a wish or run a saved tool, we store the text of your wish, the generated tool recipe (structured data such as JSON), inputs you provide when running a tool, results returned from runs, and timestamps associated with tool history. Image inputs are processed in real time to send to our AI providers; for history and storage we do not retain raw base64 image payloads in saved run history, though we may retain a placeholder or sanitized description indicating that an image was used.
Payment Data
Payments and card collection are handled by Stripe. We store identifiers such as your Stripe customer ID and subscription status in our systems so we can link your account to your subscription. We do not store full payment card numbers, card verification values, or complete primary account numbers on our own servers; Stripe processes that information under its own certifications and agreements.
Technical Data
Like most web applications, we automatically collect certain technical information when you use Wishcraft, which may include your IP address, browser type, device type, operating system, referring URL, pages or endpoints accessed, and access timestamps. This information is collected through Netlify hosting, server logs, and similar infrastructure needed to operate and secure the service.
Cookies and Local Storage
Firebase Authentication uses cookies and browser local storage to keep you signed in and to protect your session. We do not use third-party advertising cookies to track you across unrelated websites for ad targeting through Wishcraft itself.
How We Use Your Information
We use the information we collect to provide and operate Wishcraft, including authenticating you, storing your tools, and displaying your saved content. We send wish descriptions and tool inputs to Anthropic's Claude models so that tools can be generated and executed. We use account and subscription data to manage billing through Stripe and to enforce plan limits and prevent abuse. We may send you service-related notices, such as changes to this policy, security alerts, or receipts. We analyze usage in aggregate or de-identified form to improve performance, fix bugs, and plan new features. We also process information where necessary to comply with law, respond to lawful requests, and protect our rights and the rights of our users.
How We Share Your Information
When you generate or run a tool, relevant portions of your prompts and inputs are transmitted to Anthropic for processing, subject to Anthropic's policies and technical safeguards. Account records and tool data are stored in Google Cloud Firestore as part of Firebase, subject to Google's terms and privacy documentation. Payment information is shared with Stripe only as needed to complete transactions you authorize. Hosting and edge infrastructure provided by Netlify may process requests and generate logs subject to Netlify's privacy policy. We may disclose information when we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or to protect the safety of any person. We do not sell your personal information to data brokers, and we do not use your personal information to run third-party behavioral advertising through Wishcraft.
Data Storage and Security
Primary application data is stored in Google Cloud Firestore, currently configured in the United States region (for example, us-central1). We use HTTPS to encrypt data in transit between your browser and our application. Firestore security rules and application logic are designed to restrict access so that users generally access only their own account and tool data except where you explicitly share a tool link. Stripe provides PCI-compliant flows for card data. No security practice can guarantee absolute protection; if we become aware of a breach that affects you, we will notify you as required by law.
Data Retention
We retain account information while your account remains active and for a limited period after you request deletion or close your account, typically up to thirty days unless a longer period is needed to resolve disputes or comply with law. Free-tier tools are designed to expire automatically after thirty days from creation as described in our product terms. Pro-tier tools are retained while your subscription is active and in accordance with your account status after cancellation. Usage metrics used for quotas and analytics may be retained for up to twelve months in aggregated or identifiable form depending on the system. Payment and billing records may be retained for as long as required for tax, accounting, and regulatory compliance. To request deletion of personal data, email us at support@wishcraft.to.
Your Rights
Depending on where you live, you may have the right to access a copy of your personal data, to request correction of inaccurate data, to request deletion of your account and associated personal data subject to legal exceptions, to receive certain data in a portable format, and to object to or restrict certain processing. You may opt out of non-essential promotional communications by following instructions in those messages or by contacting us. We will respond to verifiable requests within the timeframes required by applicable law. Some rights may be limited where we must retain information for security, fraud prevention, or legal compliance.
Children's Privacy
Wishcraft is not intended for children under thirteen (13) years of age, consistent with our Terms of Use and the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under thirteen. Users between thirteen (13) and seventeen (17) may use Wishcraft only when a parent or legal guardian has provided verifiable consent as described in our Terms. If you believe we have collected information from a child under thirteen, or if you need to provide or withdraw parental consent for a teen account, please contact us at support@wishcraft.to. We will take steps to delete information collected in violation of this policy and may terminate accounts as described in our Terms.
International Users
Wishcraft is operated from Texas, United States. If you access the service from outside the United States, you consent to the transfer, storage, and processing of your information in the United States and possibly other countries where our subprocessors operate, which may have different data protection rules than your home jurisdiction.
California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act may provide you with additional rights, including the right to know categories and specific pieces of personal information we collect, the right to request deletion of personal information subject to exceptions, the right to opt out of the "sale" of personal information (we do not sell personal information as that term is commonly understood under the CCPA), and the right not to receive discriminatory treatment for exercising a privacy right. To submit a request, email support@wishcraft.to.
European Users (GDPR)
If the General Data Protection Regulation applies to our processing of your personal data, we rely on lawful bases such as performance of a contract with you, legitimate interests that are not overridden by your rights, and consent where required. You may have the right to access, rectify, erase, restrict processing, data portability, and object to certain processing, including profiling that produces legal or similarly significant effects where applicable. You may lodge a complaint with a supervisory authority in your country. For GDPR-related inquiries, including questions for our data protection contact, reach us at support@wishcraft.to.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. If we make material changes, we will provide additional notice where appropriate, such as by email or an in-app message. Your continued use of Wishcraft after the effective date of changes constitutes your acceptance of the updated policy.
Contact Us
Vishnova Labs LLC, a Texas limited liability company, operates Wishcraft. For privacy questions or requests, contact support@wishcraft.to.