What we collect, and why.

CraftMuni (craftmuni.com) is a sole proprietorship of Nyayapati V S Sai Rasmitha, based in India. We are responsible for the personal data described here. Questions, requests and complaints go to sales@craftmuni.com, which is also how to reach our grievance officer under India’s Digital Personal Data Protection Act.

• Orders. Your name, email, phone, shipping and billing address and what you bought, entered at checkout. Checkout is hosted by Shopify and payments are processed by Razorpay; we never see or store your full card details.
• Commissioned paintings. The story you write, any names and details in it, the photos you upload, the sketches made from it, and your name and email when you reserve an artist.
• Messages. What you send us by email or WhatsApp.
• Browsing. Pages viewed, products viewed and added to cart, device and browser type, approximate location from your IP address, and how you move around the site, collected with cookies and similar technologies (see below).

• To take, ship and support your order, including returns and refunds.
• To make your painting: your story is turned into a brief and concept sketches, and the brief, sketch and photos go to the Gond artist who paints it.
• To show prices and checkout in the right market for your country.
• To understand how the site is used and fix what doesn’t work.
• To measure our ads and show them to people likely to be interested, where you allow it.
• To meet tax, accounting and other legal obligations.

We use your data because it is needed for the contract with you (orders and commissions), because you consented (advertising cookies where consent is required), or for our legitimate interest in running and improving the shop.

We don’t sell your personal data. We share it only with the services that run the shop:

• Shopify: product catalog, cart, checkout and orders.
• Razorpay: payment processing.
• Couriers: your name, address and phone, to deliver your parcel.
• Vercel: hosting for this website and storage for commission files.
• OpenAI: your story text is sent to an AI model to draft the brief and concept sketches. Names are left out of the sketch request.
• The artist painting your commission: the brief, chosen sketch, names on the story and your photos.
• Meta (Facebook and Instagram): the Meta Pixel on this site and Shopify’s Facebook & Instagram app send page views, product views, cart and checkout activity and purchases to Meta, including hashed contact details from checkout (such as email and phone) through Meta’s Conversions API. Meta uses this to measure and target our ads. You can control how Meta uses off-Facebook activity in your Facebook settings.
• Google Analytics: site usage statistics.
• Microsoft Clarity: anonymised session recordings and heatmaps that show how pages are used. Text you type into fields is masked.

Some of these providers are outside your country, including in the United States. Where the law requires it, transfers rely on the providers’ standard contractual safeguards.

Visitors from the European Economic Area, the United Kingdom and Switzerland see a banner first. Meta, Google Analytics and Clarity stay off or run without tracking cookies until you accept. Elsewhere they run by default, and you can block them in your browser or with Meta’s and Google’s own settings. A few cookies are always needed to run the shop, such as the one that remembers your cart.

Changed your mind? Reset your choice and the banner will ask again:

• Orders and invoices: as long as tax and company law require, currently up to 8 years in India.
• Commission files (story, photos, sketches): until the painting is delivered and for up to 12 months after, so we can answer questions about it. Ask and we’ll delete them sooner.
• Messages: up to 2 years after our last conversation.
• Analytics and advertising data: as set by Google, Meta and Microsoft, typically 13–26 months.

Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, receive a copy, object to or restrict how we use it, and withdraw consent at any time. Email sales@craftmuni.com and we’ll reply within 30 days. If you’re unhappy with our answer you can complain to your data protection authority or, in India, the Data Protection Board.

The shop is meant for adults. We don’t knowingly collect data from anyone under 18.

We’ll update this page when our practices change and change the date at the top. Our Terms cover orders and commissions.