Privacy policy

Our approach

Mobieus Partners LLC dba CraftKeep ("CraftKeep", "we", "us") runs the website at mycraftkeep.com and the CraftKeep app. CraftKeep is a cloud library for your craft files, from embroidery and cut files to laser, vinyl and 3D printing projects, patterns, PDFs and videos.

Your library belongs to you. We collect only what we need to run CraftKeep well, we keep your files private by default, and we never sell your personal data. This policy walks through what we collect, why we collect it, who helps us, how we keep it safe and the choices you have.

What we collect and why

Account details

Sign-up and sign-in are handled by MobieusIDP, an identity service operated by Mobieus Partners. When you sign in, MobieusIDP passes us your identity ID, your email address and whether multi-factor authentication is turned on. Your password stays on your own device during sign-in, so CraftKeep never receives or stores it.

Your files and their details

When you upload files, we store them along with details that help you find and manage them. These include original file names and folder paths, the standardized names we create, and how you organize things by maker, series and design package. To make browsing and searching easy, we also generate previews and thumbnails and pull out text that can be searched.

We calculate a fingerprint (a hash) for each file so we can spot duplicates. Duplicate checks happen only inside your own library and are never compared against anyone else's files.

Storage use

We track how much storage your library uses so we can show it to you and apply your plan.

Billing records

Stripe processes payments for CraftKeep. Stripe shares billing records with us, such as your plan, subscription status and invoices. Full card numbers go to Stripe only and never reach CraftKeep.

Support and contact messages

If you open a support ticket or write to us through the contact form, we keep what you send and our replies. For contact-form messages, we keep a keyed hash of your IP address instead of the address itself, which helps us block spam without holding the raw IP.

Technical logs

Our systems keep basic technical logs. We use them to protect accounts, investigate problems and prevent abuse.

Cookies

The marketing website at mycraftkeep.com does not use advertising or tracking cookies. The CraftKeep app uses one essential session cookie to keep you signed in while you work.

How we use this information

We use the information above to:

• provide your library, including uploads, organization, previews, search, versions, Trash, downloads and exports
• keep CraftKeep and your account secure
• handle billing and manage your plan
• answer support requests
• send you messages about your account, such as email verification and password reset
• detect and prevent abuse
• keep and enforce a confidential list of people who may not hold a CraftKeep or MobieusIDP account, using account identifiers such as email address and identity ID
• meet our legal obligations

Marketing emails are separate. We send them only if you opt in, and saying no never affects your account.

We do not use your files to train AI models, and we do not show advertising based on what is in your library.

Who we share it with

Service providers

A small group of providers helps us run CraftKeep. Each one handles data for us, only for the purpose listed:

• MobieusIDP, operated by Mobieus Partners: identity, sign-up and sign-in
• Stripe: payment processing
• Akamai (Linode): cloud hosting and object storage, with our primary region in Chicago, United States, and an independent backup copy kept in a second region
• Google Workspace: sending account emails, such as verification and password reset messages

People you choose to share with

Your files stay private until you decide to share them. When you share, the people you pick can see what you shared with them. You can stop sharing at any time. Group sharing through guilds is planned for later, and this policy will be updated to cover it before it launches.

Legal requirements and safety

We may disclose information when the law requires it, or when it is needed to protect the rights, property or safety of our users, the public or CraftKeep.

We do not sell your personal data to anyone.

How we protect it

Security

Protection is part of how CraftKeep is built:

• CraftKeep encrypts your files before they are stored, using a separate key for each library
• files are also encrypted while they travel between your device and our servers
• every library is private by default
• an independent backup copy is kept in a second region

You can read more on our security page.

Support access to your files

Our support team cannot open the contents of your files on their own. If seeing a file would help solve your request, we ask you first. Any access needs your explicit approval, covers only what you approve and ends after a set time. A documented emergency process exists for rare cases, such as an active security incident. Every instance of support access, including emergency access, is recorded in an audit log.

Payments and storage limits

We never delete your files because a payment fails or because your library is over its storage limit.

How long we keep data

Your files and account details are kept while your account is active and for as long as we need them to run the service. Files you delete move to Trash first, so you have a chance to restore them. Backup copies are removed as those backups age out.

Where your data is stored

CraftKeep stores data with our hosting provider in the United States, with Chicago as the primary region and a backup copy in a second region.

Your rights and choices

You are in control of your information. You can:

• Access your account details and library whenever you like
• Export your full library, including your original files and a manifest describing them
• Correct your account details
• Delete individual files, or ask us to close your account and delete your data

Depending on where you live, you may have further rights under local law.

To make a request, reach us through our contact page. We may ask you to confirm your identity before acting on it.

Children

CraftKeep is not directed to children.

Changes to this policy

We may revise this policy as CraftKeep grows. If a change is material, we will tell you before it takes effect.

Contact us

We welcome questions about privacy. Please get in touch through our contact page. You can also read our terms of service and acceptable use policy.