Cashcraft

Privacy Policy

Effective date: April 29, 2026 · Last updated: April 29, 2026

1. Who we are

This Privacy Policy describes how Cashcraft Pty Ltd ("Cashcraft", "we", "us") collects and uses personal information across our websites and SaaS products: StoreSignals, Convrs, and Sendrly.

Registered in South Africa. Postal address: 5 Morris Avenue, George, 6529, South Africa. Contact: info@cashcraft.co.za.

2. What data we collect

  • Account information — name, email, password (hashed), business name, billing details.
  • Usage data — pages viewed, features used, error logs, IP address, device information.
  • Integration data — depending on the product:
    • StoreSignals: WooCommerce store data (orders, customers, products, revenue) accessed via API keys you provide.
    • Convrs: WhatsApp message content, contact lists, conversation metadata, product catalog data.
    • Sendrly: subscriber lists, email content, send logs, open/click events.

3. Why we collect it

We use this data to provide the service you signed up for: render dashboards, send messages on your behalf, deliver campaigns, sync orders, generate analytics, and process payments. We also use it to provide support, prevent fraud, and improve the products.

4. How we store it

Customer data is stored on servers located in the South African region. Passwords are hashed using industry-standard algorithms. Sensitive credentials (API keys, OAuth tokens) are encrypted at rest. Database backups are encrypted.

5. Who we share it with

We do not sell personal data. We share data only with essential service providers, each bound by data processing agreements:

  • Hostinger — server hosting infrastructure
  • Resend, Amazon SES — transactional and campaign email delivery
  • Anthropic (Claude) — AI text generation (Convrs, Sendrly, StoreSignals)
  • OpenAI — AI image generation (Sendrly only — products and scenes, never people)
  • Meta (WhatsApp Business API) — message delivery (Convrs only)
  • PayPal / Paddle — payment processing
  • Google — sign-in (when you choose to sign in via Google)

6. AI processing scope

For Sendrly users specifically: AI image generation is restricted to products and scenes. We do not generate images of people, faces, or human likenesses. See our full AI Policy for details.

7. Your rights (POPIA + GDPR)

  • Access — request a copy of personal data we hold about you
  • Correction — ask us to correct inaccurate data
  • Deletion — request deletion of your account and personal data
  • Export — receive your data in a portable format (CSV)
  • Objection — object to specific processing
  • Withdrawal of consent — withdraw consent for optional processing at any time

To exercise any of these rights, email info@cashcraft.co.za. We respond within 30 days.

8. Cookies

We use first-party cookies for session authentication and product preferences. We do not use third-party tracking cookies for advertising. Some products use minimal first-party analytics to improve the experience.

9. Children

Our products are not directed at children under 18. We do not knowingly collect personal data from children.

10. Changes

We may update this policy as our products evolve. Material changes are emailed to active customers and posted on this page with a new "Last updated" date.

11. Contact

Privacy questions: info@cashcraft.co.za. For product-specific data questions, contact the relevant product team: