Table of Contents
1. Information we collect
#We collect only the information necessary to operate the service.
Information you provide
- Email address
- Account information
- Guitar and pickup details you choose to save
- Payment-related information (handled by our payment provider)
We do not store full payment details on our servers.
Automatically collected information
We may collect limited technical information such as:
- Browser type
- Device type
- Anonymous usage data
This data does not personally identify you.
Information from Google Sign-In
If you choose to sign in with Google, we receive the following information from your Google Account:
- Email address
- Name
- Profile picture
We request only the email, profile and openid scopes. We access this data solely to create and manage your RigCraft account, we store it as part of your account profile, and we do not sell it or share it with third parties.
2. How we use your information
#We use your information to:
- Provide and maintain the service
- Generate and store your preset history
- Manage subscriptions and billing
- Communicate with you about your account or support requests
- Improve the product and user experience
We do not sell your personal data.
3. Legal basis for processing (GDPR)
#If you are located in the European Union, we process your personal data based on one or more of the following legal grounds:
- Your consent
- Performance of a contract (providing the service)
- Legitimate interest in operating and improving the product
4. Payments
#Payments are processed by Paddle, a third-party payment provider that acts as our Merchant of Record.
We do not store or have access to your full credit card details.
5. Third-party services
#We use third-party services to operate the product, such as:
- Hosting and infrastructure (e.g. cloud providers like AWS)
- Authentication and account management (AWS Cognito and Google Sign-In)
- Payments and subscription management (Paddle)
- Basic analytics
These services process data according to their own privacy policies and applicable laws. Data obtained through Google Sign-In is used only to authenticate you and manage your account, and is never sold or shared with third parties.
6. International data transfers
#Your information may be processed or stored on servers located outside your country, including the United States.
By using the service, you consent to this transfer, processing, and storage of your information.
8. Data retention
#We retain your data only as long as necessary to:
- Provide the service
- Comply with legal obligations
- Resolve disputes
You may request deletion of your account and associated data at any time.
9. Your rights
#Depending on your location, you may have the right to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Withdraw consent
California residents (CCPA)
If you are a California resident, you have the right to:
- Request disclosure of collected personal information
- Request deletion of personal information
- Request that we do not sell your personal information
We do not sell personal data.
10. Children's privacy
#This service is not intended for children under the age of 13 (or 16 in the European Union).
We do not knowingly collect personal data from children.
11. Data security
#We take reasonable measures to protect your data.
However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
12. Changes to this policy
#We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated date.
13. Contact
#If you have any questions about this Privacy Policy or your data, you can contact us at: