Privacy
Policy.

Who we are

Grafter is operated by Daniel Moore, trading as Grafter. Contact: info@getgrafter.com.

What we collect

• Account details: name, business name, trade type, region or postcode, phone number, email, and website if provided.
• WhatsApp messages: photos, voice notes, text messages, and button responses you send via WhatsApp, used to generate captions and posts.
• Connected account data: access tokens and Page or account IDs needed to post on your behalf. We do not access personal Instagram or Facebook activity beyond what is needed to publish posts you approve.
• Payment information: handled directly by Stripe; we do not store your card details ourselves.
• Usage data: which posts you create, when, and basic performance data returned by Instagram or Facebook APIs.

How we use it

• To generate caption and image suggestions in your voice.
• To publish approved posts to your connected Instagram or Facebook accounts.
• To provide marketing tips and answer your questions via WhatsApp.
• To manage your subscription and billing.
• To improve the service through aggregated, non-identifying analysis of what works.

Cookies and analytics

When you first visit the public site, we ask whether you want to allow Microsoft Clarity, an analytics service that helps us understand how pages are used. Clarity is not loaded and does not set its cookies unless you choose Accept. If you choose Necessary only, we remember that choice in a small first-party browser storage item and do not load Clarity, including when you move between pages. You can change your choice at any time using the Cookie settings link in the footer.

Grafter also uses first-party browser session storage for limited, session-scoped marketing attribution and page analytics sent to our own service. This does not contain your account or WhatsApp content. Account, WhatsApp, connected social account, and payment data are described elsewhere in this policy.

WhatsApp demo

If you use our "Try it on WhatsApp" link, we record the campaign source and UTM values server-side so we can understand which links are useful. The redirect does not load SiteAnalytics, Clarity, or other browser tracking. The demo conversation stores your WhatsApp number and messages needed to provide the demo, plus any referral details supplied by Meta.

Demo photos and generated images are deleted after 30 days. If you do not sign up, we remove the phone number from the demo lead record 90 days after your last activity. Reply STOP at any time to opt out of follow-ups immediately. You can also request deletion of demo data through our Data Deletion page or by emailing info@getgrafter.com.

Who we share it with

• Meta: WhatsApp Cloud API and Instagram or Facebook Graph API to send and receive WhatsApp messages and publish your posts.
• Anthropic: your photos, sentences, and questions are sent to Claude to generate captions and answer marketing questions.
• Supabase: our database and storage provider, hosting your account data and uploaded images.
• Stripe: payment processing; we do not see or store full card numbers.

We do not sell your data to third parties or share it for advertising purposes.

How long we keep it

We retain your account and post data for as long as your account is active, plus 1 month after cancellation in case you reactivate, unless you request earlier deletion.

Your rights

Depending on where you are based, including under UK GDPR or applicable US state privacy laws, you may have the right to access, correct, export, or delete your data, and to object to certain processing. To exercise these rights, contact info@getgrafter.com or use the in-app deletion option described on our Data Deletion page.

Children

Grafter is a business tool intended for adults running a trade business. We do not knowingly collect data from anyone under 18.

Changes to this policy

We'll update this page if our practices change and update the "Last updated" date above.

Contact

info@getgrafter.com