Privacy Policy

Last updated: March 27, 2026

ChainCraft is an educational technology platform. We do not collect, process, or store any financial trading data, cryptocurrency wallet information for real assets, or blockchain transaction data from public networks. All data described below relates solely to your use of our educational development tools.

1. Information We Collect

1.1 Account Information

  • Username, email address, and hashed password
  • Organization/project name and description
  • Subscription plan and billing information (processed by Razorpay — we do not store full card numbers)

1.2 Usage Data

  • API call logs (endpoint, timestamp, response status)
  • Feature usage statistics (aggregated daily)
  • IP addresses for security monitoring and rate limiting

1.3 Educational Content Data

  • Smart contracts deployed on our private development chain
  • Files uploaded to IPFS through our platform
  • NFT metadata and token configurations created for learning purposes
  • Development wallet addresses generated on our private chain (these are not real cryptocurrency wallets)

2. How We Use Your Information

  • To provide and maintain our educational platform services
  • To process subscription payments through Razorpay
  • To enforce API rate limits and subscription quotas
  • To detect and prevent security threats and abuse
  • To send important service notifications (subscription renewals, security alerts)
  • To improve our platform based on aggregated usage patterns

3. Data Security

We implement industry-standard security measures:

  • All data transmitted over HTTPS/TLS encryption
  • API keys are stored as irreversible SHA-256 hashes
  • Development wallet private keys are encrypted at rest using AES-256-GCM
  • Passwords are hashed using Django's PBKDF2 algorithm
  • IP-based threat detection and automatic ban system
  • Regular security audits and automated vulnerability scanning

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Razorpay: Payment processing (governed by Razorpay's Privacy Policy)
  • Law enforcement: When required by applicable law or court order

5. Data Retention

  • Account data: Retained while your account is active, deleted within 30 days of account deletion
  • Audit logs: Retained for 30 days (configurable)
  • Security event logs: Retained for 90 days
  • Payment records: Retained for 7 years as required by Indian tax law
  • IPFS content: Retained while pinned; unpinned content is garbage-collected

6. Your Rights

You have the right to:

  • Access your personal data through your dashboard and API
  • Correct inaccurate information in your account settings
  • Delete your account and all associated data through Dashboard > Settings > General
  • Request a copy of your data by contacting us at our contact page — we will provide your data within 7 business days
  • Withdraw consent for optional communications through Dashboard > Settings > Notifications

7. Cookies

We use essential cookies for session management and authentication. We do not use third-party tracking cookies or advertising cookies.

8. Children's Privacy

ChainCraft is not intended for users under 18 years of age. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notification.

10. Contact Us

For privacy-related inquiries, contact us at our contact page.