Privacy Policy

1. Who we are

CraftedPM is an AI-powered project management simulation platform operated by Teniola Ajiferuke trading as CraftedPM, based in the United Kingdom.

Contact email: hello@craftedpm.co.uk

Website: craftedpm.co.uk

2. What data we collect

Account information

Full name, email address, encrypted password, account creation date.

Profile information

Badge level, scores, public portfolio slug, biography.

Project and simulation data

Scenarios selected, decisions made, task updates, messages sent to AI personas, documents created, RAID log entries, stakeholder information, Gantt chart data, scores and AI debrief text.

Usage data

Pages visited, features used, browser type, device type, IP address.

Payment information

Handled entirely by Stripe — we do not store card numbers.

3. How we use your data

To provide the service

Running simulations, generating AI responses, saving progress, displaying your portfolio.

To communicate with you

Email verification, password resets, important platform updates.

To generate your portfolio

Calculating scores, generating AI debriefs, displaying your verified portfolio.

To improve the platform

Understanding how users interact with CraftedPM.

To process payments

Managing subscriptions through Stripe.

To comply with legal obligations

Keeping records as required by UK law.

4. The AI and your data

CraftedPM uses the Anthropic Claude API to power AI personas. When you send a message to a persona or submit a document, your message content and relevant project context is sent to Anthropic to generate a response. We do not share your name or email with Anthropic. AI-generated responses are stored in our database so your conversation history is preserved. Anthropic processes data in accordance with their privacy policy at anthropic.com/privacy.

5. Third party services

6. Who we share your data with

We do not sell your personal data. We share data only with:

• ✦The third party services listed above
• ✦Recruiters, if you make your portfolio public — they see your name and scores but not your email
• ✦Authorities, if required by law
• ✦A new owner, if CraftedPM is acquired

7. Public portfolio pages

Public portfolios show: your name, badge level, scores, completed projects, AI debrief.

Public portfolios do NOT show: email address, password, payment information, private messages.

You can make your portfolio private at any time in account settings.

8. Data retention

We keep your data while your account is active. On deletion:

• ✦Personal information removed within 30 days
• ✦Project data removed within 30 days
• ✦Public portfolio removed immediately
• ✦Payment records retained for 7 years as required by UK tax law

9. Your rights under UK GDPR

• ✦Right to access
• ✦Right to rectification
• ✦Right to erasure
• ✦Right to data portability
• ✦Right to restrict processing
• ✦Right to object
• ✦Right to withdraw consent

To exercise any right, email hello@craftedpm.co.uk. We respond within 30 days.

To complain, contact the ICO at ico.org.uk.

10. Cookies

Essential cookies

Required for the platform to work, including session cookies.

Analytics cookies

We use PostHog to understand platform usage — you can opt out in account settings.

We do not use advertising cookies.

11. Security

• ✦All data transmitted over HTTPS
• ✦Passwords hashed with bcrypt
• ✦Database hosted by Convex with enterprise security
• ✦JWT tokens for session management with 30 day expiry
• ✦API keys never exposed in client-side code

12. Children

CraftedPM is not intended for under 16s. Contact us to remove any child accounts.

13. Changes

We will notify you by email of significant changes and update the date above.

14. Contact

Email: hello@craftedpm.co.uk. We respond within 5 working days.