Privacy notice

Acraft is run by Chill Studio, a SARL with a share capital of €100, registered in France, RCS Tours 882 379 613, registered office Le Vigneau, 37240 Manthelan, France. Contact: chill.studio.dev@gmail.com.

For your account (your name, email, login and billing) and for visitors to our website, Chill Studio is the controller.

For the personal data of your clients and contacts that you put into Acraft, you are the controller and we are your processor: we handle it only on your instructions and to run the service, under our data processing terms.

If you are a homeowner or client of a business that uses Acraft (for example you sent an enquiry or received a quote), that business decides how your data is used. Contact them first; we help them answer.

• Account data: name, email, password (stored hashed), workspace and team members.
• Billing data: billing name, address, VAT number and payment status. Card details go to Stripe only.
• Business data you enter: clients, enquiries, jobs, schedules, quotes, invoices, notes, photos, documents, voice and video recordings.
• When a client accepts a quote online: their name, signature, the time, IP address and browser.
• Usage and device data: pages used (counted without cookies), errors and approximate technical details, to keep the service working and improve it.

• To provide the service you signed up for (contract).
• To secure the service, prevent abuse and fix faults (legitimate interests).
• To send service emails such as verification, reminders and the documents you send to clients (contract).
• To count visits to our website without cookies (legitimate interests; you can opt out, see the cookie notice).
• To improve our AI using anonymised quotes (legitimate interests; you can opt out, see below).
• To meet legal duties such as tax record keeping (legal obligation).

AI features send the text, images, documents and recordings you submit, and the parts of your workspace needed to answer (such as your price list, or a client’s details when you ask about that client), to AI model providers acting as our processors. They process it to produce the answer and may not use it to train their models or for their own purposes. The providers are listed on our sub-processor list.

The AI does not take decisions about people on its own. It drafts, and you review and approve before anything is sent or saved.

When you send a quote drafted by the AI, we store an anonymised record of the request, the draft and the final quote to improve our models, including fine-tuning. Names, companies, emails, phone numbers and addresses of your clients, site addresses and your team’s names are removed automatically before storage. Free-text details can occasionally slip through. Photos, videos and audio files are not part of this record, only text derived from them.

To opt out, switch off “Help improve Acraft’s quote AI” in your workspace settings, or write to chill.studio.dev@gmail.com. We stop recording and delete what we hold for your workspace.

Only service providers that help us run Acraft: hosting, email delivery, AI model providers, billing, and integrations you connect yourself (such as Xero). Each one is named on our sub-processor list. We do not sell personal data and do not use it for advertising.

Our servers are in France. Some AI providers are in the United States. Where data leaves the UK and the EU, we rely on the UK–US data bridge or the UK International Data Transfer Addendum to the EU standard contractual clauses.

Our support team can view a workspace to fix a problem you reported. Access is limited to named staff and logged.

• Account and business data: while your account is open. When you delete your workspace, it is deleted straight away from the live service and from backups within 30 days.
• AI request logs (used to fix wrong answers): 15 days. Assistant working state: 7 days.
• Activity logs (each action you take in the app and our answer, used for support and to fix faults; passwords and bank details masked): 15 days.
• Error reports: 90 days.
• Billing records about your subscription: six years after the end of the year they relate to, as tax law requires.
• Your own invoices are your accounting records: keep them for six years (HMRC). Export them before you delete your workspace.
• Anonymised AI improvement records: until you opt out or we retire the dataset.

You can access, correct, delete or export your personal data, restrict or object to how we use it, and withdraw an opt-in you gave. You can export your workspace and delete your account yourself from the settings; for anything else write to chill.studio.dev@gmail.com. We answer within one month.

If you are unhappy with how we handled your data, write to chill.studio.dev@gmail.com with “Data complaint” in the subject. We acknowledge it within 30 days, look into it, and tell you what we found and what we did.

If you are still unhappy, you can complain to the Information Commissioner’s Office (ico.org.uk) in the UK, or to the CNIL (cnil.fr) in France, where we are established.

Data is encrypted in transit, accounts are kept apart, access is limited to the team that needs it and passwords are stored hashed. No system is perfectly secure; if a breach puts your data at risk we will tell you and the regulator as the law requires (within 72 hours for the regulator).

We only use cookies needed to sign you in and remember your settings. See the cookie notice.

If we change this notice materially we will tell you before it applies.