Privacy Policy

Last updated: 20 July 2026

This Privacy Policy explains how Quvor, the company that operates TribeCrafter (“TribeCrafter”, “we”, “us”, or “our”), handles personal data when you use the TribeCrafter platform at tribecrafter.net, app.tribecrafter.net, community sites hosted on tribecrafter.app and custom domains, and related services (together, the “Platform”).

We are committed to protecting your privacy in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law, and — where it applies to you — the EU/UK General Data Protection Regulation (GDPR).

1. The two roles: Creators and Members

TribeCrafter is used by Creators, who run communities, and by the Members of those communities. Our privacy responsibilities differ for each:

  • For a Creator’s own account data (sign-up, profile, and billing), TribeCrafter is the data controller / data fiduciary. This Policy governs how we handle it.
  • For the personal data of Members inside a Creator’s community, the Creator is the controller and TribeCrafter acts as a processor / data processor on the Creator’s behalf. Each Member should also read the privacy notice provided by the Creator whose community they joined.

Every community runs on its own separate database, file storage, and search index, so one community’s Member data is fully isolated from other communities on the Platform.

2. Information we collect

Account information. When you register, we collect your email address and a password (stored only in hashed form). If you complete your profile during onboarding, we also collect your first and last name, and any of the following you choose to add: username, avatar, cover photo, bio, location, and other profile fields.

Content you create. Posts, comments, courses, lessons, events, blog articles, direct messages, poll votes, reactions, cart and wishlist items, and any media (images, video, audio, files) you upload.

Payment information. When a Creator subscribes to a paid TribeCrafter plan, billing is handled by our payment processor Dodo Payments. When Members buy paid access from a Creator, payments are handled by Stripe. We do not store full card numbers; we receive only limited billing details such as transaction status and card metadata.

Usage and device data. Log data such as your IP address, browser and device type, pages viewed, timestamps, and actions taken, used to operate, secure, and improve the Platform.

Support and feedback. Messages you send us through support, live chat, the help center, or the in-app feedback widget.

Cookies and similar technologies. Used for sign-in sessions, preferences, and analytics. See section 7.

3. How we use information

  • Provide, operate, and maintain the Platform and your community.
  • Authenticate you and keep accounts secure.
  • Process payments and manage subscriptions.
  • Send service messages such as email verification, password resets, receipts, event reminders, activity digests, and important notices.
  • Send product and activity updates you have not opted out of.
  • Respond to your support requests and feedback.
  • Monitor, troubleshoot, and improve performance, reliability, and safety.
  • Comply with legal obligations and enforce our Terms.

4. Legal bases for processing (where GDPR applies)

Where the GDPR applies to you, we rely on: performance of a contract (to provide the Platform), our legitimate interests (to secure, analyse, and improve the Platform), your consent (for optional communications and non-essential cookies), and legal obligation. Where we rely on consent, you may withdraw it at any time. Where Indian law applies, we process personal data with your consent and for the legitimate uses permitted under the Digital Personal Data Protection Act, 2023.

5. How we share information

We do not sell your personal data. We share it only as needed to run the Platform:

  • With the service providers (subprocessors) listed in section 6, who process data on our behalf under contract.
  • With a Creator, for the Members of that Creator’s community (the Creator is the controller of their community’s data).
  • For legal reasons, where required by law or to protect rights, safety, or the integrity of the Platform.
  • In a business transfer, such as a merger, acquisition, or sale of assets, subject to this Policy.

6. Service providers (subprocessors)

We work with a small number of trusted third-party providers who process personal data only on our instructions and under contractual data-protection obligations. They fall into the following categories:

  • Payment processing
  • Cloud hosting and file / media storage
  • Video and audio hosting and delivery
  • Email delivery
  • Product analytics and error monitoring
  • Customer support and live chat
  • Content delivery, security, and related platform functionality

We do not sell your personal data to any of them. A current list of the specific providers we use is available on request at [email protected], and we keep it up to date as our infrastructure evolves.

7. Cookies and similar technologies

We use a small number of cookies and similar technologies:

  • Essential session cookies — to keep you signed in and keep the Platform working (for example, our tribecrafter and tribecrafter_session cookies, and the authentication cookie from our data layer). These are strictly necessary and cannot be turned off.
  • Analytics cookies and storage — set by our analytics provider to understand usage and improve the Platform.
  • Security / delivery cookies — set by our content-delivery provider to protect and speed up the Platform.

You can control or delete cookies through your browser settings, but some features may not work without the essential cookies.

8. International data transfers

Some of our service providers are located outside your country, including in the United States and the European Union. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent measures required by applicable law.

9. Data retention

We keep personal data for as long as your account is active and as needed to provide the Platform, and afterwards for a reasonable period to meet legal, accounting, security, and dispute-resolution needs. Encrypted backups are retained for a limited period (around 35 days) before deletion.

10. Your rights

Depending on where you live, you may have the right to access, correct, update, or delete your personal data, to export it, to object to or restrict certain processing, to withdraw consent, and to nominate another person to exercise your rights in the event of death or incapacity. To exercise these rights for data where TribeCrafter is the controller, contact us at [email protected]. If your request concerns data inside a specific Creator’s community, please contact that Creator (the controller); we will assist them as their processor. You may also have the right to complain to your data protection authority — in India, the Data Protection Board of India.

11. Security

We use appropriate technical and organisational measures to protect personal data, including per-community data isolation, encryption in transit, encrypted backups, and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authority as required by law.

12. Children

The Platform is intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it.

13. Links to other sites

The Platform and communities may link to third-party sites we do not control. This Policy does not cover those sites; please review their privacy policies.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will give notice, for example by email or a notice on the Platform. The “Last updated” date above shows the latest version.

15. Grievance Officer and contact

For any questions, requests, or complaints about privacy or your personal data, contact our Grievance Officer:

Quvor (operator of TribeCrafter)
Email: [email protected]

We will acknowledge and respond to grievances within the timelines required by applicable law.