Privacy Policy

This Privacy Policy explains how Craft and Logic, Inc. (“Craft/Logic,” “we,” “us,” or “our”), a Texas C Corporation, collects, uses, and protects information when you use the SANCTUM service available at sanctum.craftxlogic.com (the “Service”). This policy applies only to the hosted Service we operate; it does not apply to self-hosted instances of the SANCTUM open-source software that you run on your own infrastructure.

1. Information We Collect

Account information

When you create a workspace, we collect the username, email address (if provided), and a hashed password you supply. We do not store your password in plain text.

Workspace content

The Service stores content you choose to place in your workspace, including project and environment names, member records, SSH public keys, server hostnames, provision tokens, and role assignments. You are responsible for the contents you enter.

Operational data

When managed nodes or your browser communicate with the Service, we receive standard request metadata such as IP addresses, user agents, hostnames reported by provisioning scripts, and timestamps. We use this data to operate the Service, diagnose problems, and protect against abuse.

Billing information

If you subscribe to a paid plan, payment processing is handled by our payment provider (Stripe). We receive limited billing metadata such as subscription status, plan, and the last four digits of a card; we do not store full card numbers.

Cookies and similar technologies

We use a small number of cookies or local-storage entries needed to keep you signed in and remember workspace selections. We do not use third-party advertising cookies.

2. How We Use Information

• To provide, secure, and maintain the Service.
• To authenticate users, serve provisioning scripts to machines you designate, and record heartbeats.
• To communicate with you about the Service, including security or service notices.
• To comply with applicable laws and enforce our Terms of Use.

We do not sell personal information, and we do not share workspace content with third parties except as needed to operate the Service or as required by law.

3. How We Share Information

We share limited information only with:

• Service providers who host infrastructure, process payments, or send transactional email on our behalf, under confidentiality and data-protection obligations.
• Authorities when we are legally compelled, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of users or the public.
• Successors in the event of a merger, acquisition, or asset sale, subject to equivalent privacy protections.

4. Data Retention

We keep account and workspace data for as long as your workspace is active. If you delete your workspace or account, we remove or anonymize associated data within a reasonable period, subject to backup cycles and any retention required by law. Aggregate, non-identifying logs may be retained longer for security and analytics.

5. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect the Service, including encryption in transit (HTTPS), password hashing, and least-privilege access for operators. Provision tokens are treated as secrets and should be kept confidential by you; rotate them from the dashboard if compromised.

6. Your Rights

Depending on where you reside, you may have rights to access, correct, export, or delete your personal information. To exercise these rights, email us at support@craftxlogic.com. We will respond within the time required by applicable law.

7. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can remove it.

8. International Users

The Service is operated from the United States. By using the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective date” above and, where appropriate, notify workspace owners by email or an in-app notice. Your continued use of the Service after an update constitutes acceptance of the revised policy.

10. Contact

Craft and Logic, Inc.
Attn: Privacy
1321 Upland Dr., PMB 20350
Houston, Texas 77043, United States
support@craftxlogic.com