Privacy Policy

01What we keep

• The account: your email address, a hash of your password, and when you sign in, held by our sign-in service.
• Your profile: a display name (at sign-up, the part of your email before the @, until you change it), and, if you add them, a picture, bio and website. Other signed-in Rao accounts can see your name and picture. If you choose a handle, your profile becomes public: it is the name your listings and your storefront carry. Your email, phone and the rest of your account are never shown to anyone else.
• Your library and orders: which listings you hold and when you took them, and for each order the amount, the date, its status and Stripe’s identifiers for the payment and the invoice.
• Credits: your balance, each top-up (its amount, its date and Stripe’s identifiers), your auto-reload setting, and each paid call: which agent, which app made it, when, and how many Credits.
• Rao Plus: the subscription’s status and period dates, Stripe’s identifiers, and each invoice’s number, amount and link.
• Following and subscribing: which creators you follow and since when, and for each subscription to a creator its price, status, period dates and Stripe’s identifiers, and each month’s invoice: its number, amount, date and link.
• Earnings and payouts, if you sell an agent: what each call and sale earned you. Payouts are coming soon; once they open and you set one up, also each cash-out, and your Stripe account’s id, its country and what Stripe says about it (whether it can be paid, and the bank’s name and last four digits). Stripe collects and keeps the rest of what it asks for, such as your identity documents and the full bank number; we never receive them.
• Cards: none. Stripe keeps them. The store asks Stripe for the brand, last four digits and expiry each time it shows you your cards, and stores none of it.
• Listings, if you are a creator: everything you write into one, and the icon you upload.
• Technical: our web host records the IP address and browser of each request in its logs, as any website’s host does.

02What we don’t do

No analytics, no advertising, no tracking pixels, and no third-party scripts except Stripe’s, which loads only on the pages where you pay, add a card or set up payouts. We don’t sell personal data, share it for advertising, or combine it with data from other services.

03Who processes it

• Stripe, Inc. (USA) takes payments, keeps cards, runs the billing portal and issues invoices and receipts. It receives your email, the amount, and the card you type, and sets its own cookies inside its payment form to prevent fraud. Once payouts open and you set one up, Stripe also holds your payout account, and what it asks to verify you and your bank, through its forms on our Payouts page.
• Vercel, Inc. (USA) hosts the website and keeps its access logs.
• Our accounts service at api.rao.nyc, run by Rao Studios on [provider and region], holds the account, profiles, library, orders, subscriptions and uploaded images.
• Sign-in codes are sent by email through [email provider]; Stripe sends payment receipts.
• When Craft installs an agent, your Mac fetches it from GitHub, which sees your IP address. That request is between your Mac and GitHub.

04Where it lives

Data is held in [the United States]. If you are in the UK or the EU, that is a transfer out of your country; it relies on [the standard contractual clauses each processor offers, or the EU–US Data Privacy Framework where the processor is certified].

05Why we use it

To run the account and the store you asked for: signing you in, keeping your library, taking payments and sending receipts (performing our agreement with you). To keep the service safe and to keep the records tax law asks for (legal obligation and legitimate interest). We don’t use it for marketing; if that ever changes, you will be asked first.

06Cookies

One cookie, set when you sign in, carries your session; it is essential to the service, so there is no banner to accept. Stripe’s payment form sets its own, under Stripe’s policy, only while that form is on the page.

07How long we keep it

The account and profile: while the account is open, then deleted within 30 days of your asking. Orders and invoices: seven years, as tax records, with your account’s link to them removed once the account is closed. Uploaded icons and pictures: until replaced, or until the account is deleted. Host logs: [30] days. Stripe keeps its own records under its own policy.

08Your choices and rights

On your account page you can change your name, picture, bio and password, add and remove cards, cancel Rao Plus and sign out. To see everything we hold, correct it, or have the account deleted, write to ritesh@rao.nyc from the account’s email address. Deleting removes the account, profile, library and pictures, and keeps only the order records the law requires, with your name taken off them.

If you are in the UK or the EU you have the rights of access, rectification, erasure, restriction, objection and portability, and may complain to your supervisory authority. If you are in California: we don’t sell or share personal information, and you may ask what we hold and have it deleted as above.

09Children

The account is not for anyone under 13, and we don’t knowingly keep data about anyone that age. If a child has made an account, write to us and it will be deleted.

10Creators and the people who buy from them

A creator sees how many copies of a listing are in libraries, how many calls and sales it had and what they earned, and how many follow and subscribe to it; never who called, bought, follows or subscribes, nor their names or emails. Anyone sees a creator’s follower and subscriber counts on its storefront. A buyer sees the creator’s public profile. Reports about a listing come to ritesh@rao.nyc and may be passed to its creator without naming who reported it.

11Security

Everything travels over HTTPS; passwords are hashed; every row of account data is guarded by row-level security, so a signed-in account reads only its own. Card numbers never reach us. No system is perfect: if you find a weakness, write to us and a person will answer.

12Changes

The current policy lives at craft.rao.nyc/store/privacy with its date at the top. A material change will be sent to the email on your account before it applies.

13Contact

Rao Studios, LLC, [street address], New York, USA. ritesh@rao.nyc.