Privacy

KREATIF TECHNOLOGY LLC · TODO: registered postal address of KREATIF TECHNOLOGY LLC · legal@handoff.marul.co

This notice explains what KREATIF TECHNOLOGY LLC collects when you use Handoff.

Account data

We store your email address, the name we derive from it unless you change it, session records, and billing identifiers returned by Dodo Payments. Sign-in uses a single-use link. We do not store an account password. Link passwords are stored only as PBKDF2 hashes.

Files

Files you upload, and files uploaded to your request links, are stored in Cloudflare R2. We store the file name, size, and a content type you or the browser sent. We do not use Workers AI or any other model to read file contents.

Technical data

We hash IP addresses with a server secret before writing them to rate-limit and download logs. We keep a short user-agent string on sessions and download events. We keep structured logs of requests without magic-link tokens, passwords, or card data.

Payments

Dodo Payments is the merchant of record. Card numbers go to Dodo, not to us. We receive subscription status, product, customer id, and the email on the subscription so we can apply the right quota.

Processors

Cloudflare hosts the application, database, file storage, queues, bot checks, and email sending. Dodo processes payments. We do not sell personal information.

Retention and deletion

You can delete deliveries and requests from the workspace. Deleting the workspace, once billing is cancelled or expired, removes the account and queues file objects for deletion. A nightly backup of the database is written to a private bucket and is kept so we can restore from operator error. Backups age out operationally; ask privacy@handoff.marul.co if you need a specific record removed from backups.

Contact

Privacy requests go to privacy@handoff.marul.co. Our postal address is TODO: registered postal address of KREATIF TECHNOLOGY LLC.