Privacy Policy

Effective Date: April 17, 2026

Granite Logic, LLC ("Crafted Call", "we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use craftedcall.com (the "Service").

Information We Collect

Account information: Email address, name, and password (hashed by AWS Cognito — we never see your plaintext password).

Profile information: Location, biography, artist statement, portfolio images, and social links you choose to provide.

Submission content: Artwork files, artist statements, and related materials submitted to calls for artists.

Payment information: Payment is processed by Stripe. We store transaction records but never see raw card numbers.

Usage data: Pages visited, features used, and error logs for service improvement.

Device data: IP address, browser type, and device identifiers for security and analytics.

How We Use Your Information

To provide, operate, and improve the Service
To process transactions and send related notices
To send administrative emails (submission confirmations, jury decisions, billing receipts)
To detect and prevent fraud and abuse
To comply with legal obligations

Cookies

We use strictly necessary cookies for authentication and security. We use functional cookies to remember your preferences. See our Cookie Policy for details.

If you are in the European Economic Area, you have the following rights:

Right to access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to restriction: Request that we limit how we use your data.
Right to object: Object to processing based on legitimate interests.

To exercise these rights, visit Settings → Privacy or email privacy@craftedcall.com.

Legal basis for processing: We process your data on the basis of (a) contract performance (providing the Service), (b) legitimate interests (security, fraud prevention, service improvement), (c) legal obligation (financial record keeping), and (d) consent (marketing emails).

International transfers: Your data is stored in AWS us-east-1 (N. Virginia). Data transfers to the US from the EEA rely on Standard Contractual Clauses (SCCs).

Data Protection Officer: We do not have a designated DPO. Contact privacy@craftedcall.com for all privacy inquiries.

Your Rights Under CCPA

If you are a California resident, you have the following rights:

Right to know: Request disclosure of personal information we collect, use, disclose, or sell about you.
Right to delete: Request deletion of personal information, subject to exceptions.
Right to opt-out of sale: We do not sell personal information. You may still submit a "Do Not Sell or Share" request from your account settings.
Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise CCPA rights, visit Settings → Privacy or email privacy@craftedcall.com.

Retention

Account data: Retained until you delete your account, then anonymized within 30 days.
Audit logs: 90 days (aligned with our operational audit log retention policy).
Submission artwork: Retained while the organization's account is active, then until the organization or artist deletes it.
Financial records: 7 years (IRS requirement for US organizations) or 10 years (EU requirement), whichever is applicable.
Email logs: 90 days for transactional delivery logs.

Breach Notification

In the event of a personal data breach, we will notify affected customers within 72 hours of discovery, consistent with GDPR Art. 33 and our Data Processing Addendum.

Children's Privacy

We do not knowingly collect personal information from children under 18. If we discover we have collected such data, we will delete it within 30 days.

Changes to This Policy

We will post material changes to this page with an updated effective date. For significant changes, we will notify you by email.

Contact

For privacy questions or requests: privacy@craftedcall.com

Granite Logic, LLC

Privacy inquiries: privacy@craftedcall.com

Information We Collect

Account information: Email address, name, and password (hashed by AWS Cognito — we never see your plaintext password).

Profile information: Location, biography, artist statement, portfolio images, and social links you choose to provide.

Submission content: Artwork files, artist statements, and related materials submitted to calls for artists.

Payment information: Payment is processed by Stripe. We store transaction records but never see raw card numbers.

Usage data: Pages visited, features used, and error logs for service improvement.

Device data: IP address, browser type, and device identifiers for security and analytics.

Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights:

Right to access: Request a copy of the personal data we hold about you.

Right to rectification: Request correction of inaccurate data.

Right to erasure: Request deletion of your personal data, subject to legal retention requirements.

Right to data portability: Receive your data in a structured, machine-readable format.

Right to restriction: Request that we limit how we use your data.

Right to object: Object to processing based on legitimate interests.

International transfers: Your data is stored in AWS us-east-1 (N. Virginia). Data transfers to the US from the EEA rely on Standard Contractual Clauses (SCCs).

Data Protection Officer: We do not have a designated DPO. Contact privacy@craftedcall.com for all privacy inquiries.

Your Rights Under CCPA

If you are a California resident, you have the following rights:

Right to know: Request disclosure of personal information we collect, use, disclose, or sell about you.

Right to delete: Request deletion of personal information, subject to exceptions.

Right to opt-out of sale: We do not sell personal information. You may still submit a "Do Not Sell or Share" request from your account settings.

Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

Retention

Account data: Retained until you delete your account, then anonymized within 30 days.

Audit logs: 90 days (aligned with our operational audit log retention policy).

Submission artwork: Retained while the organization's account is active, then until the organization or artist deletes it.

Financial records: 7 years (IRS requirement for US organizations) or 10 years (EU requirement), whichever is applicable.

Email logs: 90 days for transactional delivery logs.