Privacy Policy

This Privacy Policy explains how Smoothgrain Studios LLC ("SmoothGrain", "we", "us") collects, uses, and shares information when you use the Kerf website and application ("Kerf"). Our approach is to collect as little as possible.

1. Information we collect

• Account information. If you create a SmoothGrain account, we store your email address and authentication data. We support passkeys and do not store passwords in plain text.
• Subscription and license data. Your plan, entitlement status, and purchase history needed to provide Pro features.
• Support communications. If you contact us, we keep your messages and contact details so we can respond.
• Website analytics. Our site uses Cloudflare Web Analytics, which is privacy-friendly and does not use cookies or track you across sites. Our support form uses Cloudflare Turnstile to prevent spam.
• Payment information. Payments are processed by our merchant of record, Paddle, which collects and processes your billing details and payment-card information under its own privacy policy. SmoothGrain does not receive or store your full card number.

2. What the Kerf app collects

The Kerf application contains no analytics or telemetry, and the files you edit never leave your machine. Kerf contacts our servers only to sign you in and to verify your license and entitlement.

3. How we use information

To provide and maintain Kerf and your Pro features; to process purchases (via Paddle); to provide support; to secure our services and prevent abuse; and to comply with our legal obligations.

4. How we share information

We do not sell your personal information. We share data only with service providers that help us run Kerf, under appropriate agreements:

• Paddle — payments, billing, and tax (merchant of record).
• Cloudflare — website hosting, privacy analytics, and bot protection (Turnstile).
• Neon — database hosting for accounts and entitlements.
• Resend — sending transactional and support email.

We may also disclose information if required by law or to protect our rights and our users.

5. Data retention

We keep personal information for as long as needed to provide Kerf and for legitimate business or legal purposes, after which we delete or anonymize it.

6. Your rights

Depending on where you live (including under the GDPR and the CCPA), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, email support@smoothgrain.app. For payment-data requests, you may also contact Paddle.

7. International transfers

We are based in the United States and process data there. Where data is transferred internationally, we rely on appropriate safeguards as required by law.

8. Children

Kerf is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information.

9. Changes

We may update this Policy. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you.

10. Contact

Smoothgrain Studios LLC, Milwaukie, Oregon, USA — support@smoothgrain.app.