Privacy Policy

Philippine Data Privacy Act Notice

Data Controller: KraftasticPH, operating as Kraftastic Moments (Philippines).

Legal basis for processing: your consent and the contractual necessity of providing the service.

We process personal data in accordance with Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules.

1. Introduction & Scope

This policy explains how we collect, use and protect personal data of organizers and their guests.

2. Information We Collect

Personal information: name, email, phone, profile photo.
Event information: event names, dates, venues, guest lists, seating.
Payment information: tier purchases and vendor payment records you enter.
Communication data: messages and invitations sent through the platform.
Usage analytics: pages visited, device and browser information.

3. How We Use Information

To operate your events, match RSVPs, generate invitation pages, provide support, and improve the product.

4. Data Security

Data is encrypted in transit, stored on access-controlled infrastructure, and protected by row-level security so that only you and your authorized collaborators can read your event data.

5. Data Retention

Event data is retained while your account is active and for 12 months after an event, unless you delete it sooner.

6. Sharing Information

With our Merchant of Record: Paddle.com Market Limited acts as the Merchant of Record and reseller for all purchases. When you buy a plan, Paddle receives and processes your billing and payment data (name, email, billing address, tax location, payment details) to take payment, manage subscriptions, issue invoices and handle tax compliance and refunds. Paddle acts as an independent controller for that data — see the Paddle Privacy Notice.
With vendors: only the details you choose to share.
With service providers: hosting, email and analytics providers bound by confidentiality.
Professional advisers: legal and accounting advisers where necessary.
Legal requirements: when required by Philippine law or lawful order.

We never sell personal data.

7. Your Rights

Under the Data Privacy Act you may: access your data, correct it, object to processing, request erasure (right to be forgotten), request data portability, and lodge a complaint with the National Privacy Commission.

8. Cookies & Tracking

We use essential cookies for sign-in sessions and minimal analytics. No third-party advertising trackers.