Privacy Policy

Cryptorafts operates Cryptorafts Network and related websites (the “Platform”). Contact: support@cryptorafts.com / business@cryptorafts.com.

Legal entity / registered address details: Requires confirmation — ask business@cryptorafts.com for the current company registration information if needed for a formal request.

This Policy covers information we collect directly, information you submit, information we receive from verification and payment providers, publicly available directory inputs, and technical data collected automatically. Related: Cookie Policy, Terms.

Depending on how you use the Platform, we may process:

• Name, email, display name, photo (for example from Google sign-in)
• Selected role (founder, VC, exchange, IDO/launchpad, influencer, agency, etc.)
• Company/project profile fields, social links, website
• Referral codes when you provide them

• Project name, stage, category, website, traction, and related outreach fields
• Pitch decks and optional documents you upload (for example to cloud storage)
• Pitch history, status events, and delivery metadata

When you start verification, third-party providers such as Didit collect identity or business documents and perform checks. Cryptorafts may receive and store verification results, session identifiers, status, summaries, and decision payloads needed to unlock product features and show verification badges.

Decision data may include identity attributes returned by the provider (for example names, dates of birth, document-related fields, or screening indicators). We process this to operate verification-gated features, prevent abuse, and meet compliance needs. Verification does not guarantee trustworthiness or investment quality. See Verification Policy.

• In-app messages and outreach thread metadata where those features are used
• Pitch emails sent from your connected mailbox (and often CC to pitchdeck@cryptorafts.com) or, in some flows, via Cryptorafts sending infrastructure with your Reply-To
• Transactional emails (security, billing, product notices)
• Support emails you send to us

Stripe processes card payments. We store subscription/entitlement status, plan identifiers, and payment-related references needed to grant access. We do not store full card numbers on Cryptorafts servers. Optional USDC payments may involve on-chain transaction references when crypto checkout is enabled.

• IP address, device/browser information, and logs for security and reliability
• Session and authentication tokens (Firebase Auth)
• Vercel Analytics usage metrics
• Advertising-related identifiers via Google AdSense and local consent preferences (see Cookie Policy)

Raft AI and related features may send project or pitch inputs to AI providers (including OpenAI when configured) or process them with local heuristics. We use outputs for scoring, recommendations, or content assistance—not as investment advice. AI providers process data under their terms; Cryptorafts does not claim that providers train foundation models on your data unless that is established by the applicable provider agreement.

• Provide accounts, directories, directory, pitching, and dashboards
• Verify users and unlock gated contacts/features
• Process payments and entitlements
• Secure the Platform, prevent abuse, and debug issues
• Communicate about the service; optional marketing where permitted
• Comply with law and enforce Terms

We share data with processors and partners only as needed to run the Platform, including:

• Firebase / Google Cloud (auth, database, storage)
• Vercel (hosting)
• Didit (verification)
• Stripe (payments)
• Google (sign-in)
• Email providers you connect (Gmail, Microsoft, etc.)
• OpenAI or other AI APIs when AI features are enabled
• Google AdSense / analytics partners

We may disclose information if required by law or to protect rights and safety.

We implement reasonable technical and organizational measures designed to protect personal information (including HTTPS, authentication, access controls, and secrets managed via environment configuration). No method of transmission or storage is 100% secure.

We retain account, project, verification, communication, payment, and log data for as long as reasonably necessary to provide the service, meet legal obligations, resolve disputes, enforce agreements, and maintain security. Exact retention schedules may vary by data type and are not exhaustively published here.

• Update profile information in account settings where available
• Manage cookie/ad preferences via the on-site consent banner
• Request account closure or data assistance by emailing support@cryptorafts.com (self-service deletion may not be fully automated)
• Cancel subscriptions via Billing / Stripe flows where available

Data may be processed in countries where Cryptorafts or its providers operate. Where required, we rely on appropriate transfer mechanisms offered by those providers.

The Platform is not directed to children under 18. We do not knowingly collect their personal information.

We may update this Policy by posting a revised version with a new date. Material changes may also be communicated in-product or by email where appropriate.

Privacy requests: support@cryptorafts.com