Legal
Privacy Policy
Plain-English version first, in every section.
Last updated: 8 October 2026.
Croft is built on a simple idea: your apps and your data are yours. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the choices you have. If anything here is unclear, email [email protected] and a human will answer.
The short version
- Your apps run on your own private server. Your app data lives there, not in a shared pool with everyone else’s.
- We collect the little we need to run your account, bill you, and keep your croft healthy.
- We don’t sell or rent your data, and we don’t show ads.
- You can export your data and delete your workspace whenever you like.
Who we are
Croft is a product of Lupchoo Limited, a company registered in New Zealand (“we”, “us”). Croft provides the private server, the sign-in system, and the caretaking that your apps run on.
For your account and billing details, we are the controller. For the data inside your apps, you are the controller and we are a processor acting on your instructions.
Personal data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account information | Your name, email address and workspace name | You, when you sign up |
| Your people | The names, email addresses and roles of people you add to your workspace | You or your workspace admins |
| Sign-in data | One-time sign-in codes, passkey public keys, session cookies and access tokens for connected AI assistants | Created when you sign in |
| Billing information | Plan, subscription status and invoices. Card details are collected and held by Stripe; we never see or store your full card number | You, through Stripe’s checkout |
| App content | The code of your apps and the data your apps store | You, your people and the AI assistants you use |
| Ask Croft | Messages and files you send to Ask Croft, Croft’s built-in assistant, and the notes it keeps in Memory | You |
| Operational data | App logs, error reports, request metrics (such as paths, status codes and timings), health metrics and an audit log of actions in your workspace | Your server and the Croft panel |
| Signup measurement | When you sign up from an ad on X: X’s click identifier, a SHA-256 hash of your email address, and the IP address and browser details of the signup request | Your signup |
| Website analytics | Aggregate visit counts on oncroft.net, collected without cookies | Simple Analytics |
Restricted data. Croft doesn’t ask for or collect health or medical information, biometric data, government identifiers (such as social security numbers) or payment card numbers. We never ask you to send passwords, API keys or other secrets by email or in an AI chat. Secrets and connector credentials are entered only in your Croft panel.
Why we use it
- To provide Croft: creating your workspace, signing you and your people in, running, building and deploying your apps, and delivering the emails the service sends.
- To keep it healthy and secure: monitoring, fixing faults, restoring backups, preventing abuse and keeping an audit trail.
- To bill you: managing your subscription and keeping the records the law requires.
- To support you: answering your questions and requests.
- To measure our marketing: counting signups that came from our ads on X, and understanding visits to our website.
We don’t use the contents of your apps or your chats to train AI models, and we don’t build advertising profiles.
Who we share it with
We share personal data only with the service providers we need to run Croft, and only for the purposes above:
| Recipient | What they do | What they receive |
|---|---|---|
| Hetzner and Vultr | Hosting for your private server and our control systems | Everything stored on your server |
| Cloudflare | Network, DNS, and storage for backups and uploaded files | Traffic to Croft, backups and files |
| Postmark | Sending email (sign-in codes, invitations, alerts) | Recipient email addresses and message content |
| Stripe | Payments and invoicing | Your billing details |
| New Relic | Performance monitoring of Croft’s own control systems (not your apps) | Technical request data from the Croft panel |
| xAI | Runs Ask Croft, the built-in assistant, when you use it. If you connect your own Anthropic or OpenAI key, that provider receives the chat instead | Your chat messages and the app context needed to answer them |
| X (Twitter) | Measuring signups from our ads, once per signup | The signup measurement data listed above |
| Simple Analytics | Cookie-free website statistics | Aggregate visit data from oncroft.net |
| An AI assistant you connect | Building and managing apps for you (see below) | The tool results you ask for |
We may also disclose data where the law requires it, or to protect the rights, safety or property of our users or the public. If Croft is ever sold or merged, your data would pass to the new owner under this policy.
Connecting an AI assistant
You can connect an AI assistant (such as ChatGPT, Claude or Cursor) to your croft through Croft’s MCP server. Each person signs in with their own Croft account, and the assistant gets only the access their role allows. You can disconnect it at any time from the assistant, and an owner can remove a person from the workspace.
When you ask the assistant to do something, Croft sends it the results it needs: app names, URLs and status, the code it reads or writes, deploy logs and error reports, the names and email addresses of people and their app access (owners and admins only), and rows from an app’s database only if an owner has turned on assistant access for that app. The assistant’s provider handles that information under its own privacy policy. Each assistant action is recorded in your workspace’s audit log.
Secrets and connector credentials are never returned to an assistant, and no Croft tool accepts them. Croft gives assistants guidance not to build apps that collect the restricted categories listed above.
How long we keep it
| Data | How long we keep it |
|---|---|
| Account information, your people, app code and app data | While your workspace exists. They are deleted when the owner deletes the workspace |
| Backups of app data and app code | A rolling 7 days, so copies of a deleted workspace are gone within 7 days of deletion |
| App logs and request metrics on your server | 7 days |
| Health and error records in the Croft panel | Up to 30 days. Summarised metrics are kept for 7 days |
| Audit log | 90 days |
| Sign-in codes | Valid for 10 minutes, and deleted with your account |
| Sessions | 30 days. AI assistant access tokens last 24 hours and are renewed while the assistant stays connected |
| Ask Croft messages, files and Memory notes | While your workspace exists |
| Billing records | Invoices and tax records for as long as the law requires (currently 7 years in New Zealand). Your Stripe customer record is deleted when you delete your workspace |
| Website analytics | Aggregate statistics, kept by Simple Analytics |
If a trial ends without a subscription, we email you, then delete your server and the apps running on it 7 days after the trial ends. We keep your account record, app code, chat history and the last backup of your app data so you can come back. To have those deleted too, delete your workspace from the panel or email us.
If your subscription ends, your workspace stays until you delete it from the panel or ask us to.
Deleting your workspace permanently removes your server, apps, app code, data, people and chat history. Backup copies age out within 7 days.
Your choices and controls
- Export: download your apps’ code and data from your croft at any time.
- Correct: update your details and your people from the panel.
- Delete: delete individual apps, remove people, or delete your whole workspace from the panel.
- AI assistants: connect or disconnect them yourself. Owners choose which apps an assistant may read data from.
- Email us: for anything else, including access, correction, deletion, objecting to processing, or a copy of your data, email [email protected]. We respond within 30 days.
Depending on where you live, you may also have the right to complain to a data-protection authority. In New Zealand, that is the Office of the Privacy Commissioner.
Security
Each workspace runs on its own server. Every app sits behind your workspace sign-in by default, traffic is encrypted, and secrets are stored encrypted. See our security page for more.
Children
Croft is a business tool and isn’t directed at children under 13. We don’t knowingly collect their personal data.
International transfers
Our service providers may process data outside your country, including in the European Union and the United States. We rely on their contractual and legal safeguards for those transfers.
Changes to this policy
If we make a meaningful change, we’ll update this page and, where it matters, tell you directly. The “last updated” date above always shows the current version.
Contact
Questions, requests or complaints: [email protected], or see our support page.
Start your free trial.
Your team's first app could be live before lunch.
No card. 7 days. Cancel anytime.