Privacy Policy

Information we collect

• Contact and order details, such as your name, email, addresses, recipient details, and order history.
• Photographs, stories, names, dates, captions, preferences, and project instructions.
• Transaction status and limited payment details from Stripe. Stripe receives the complete card information.
• Support messages, approvals, and revision instructions.
• Technical and security information, such as browser, device type, referring page, Site activity, and IP address where generated by our infrastructure.
• Marketing preferences and campaign-attribution information when marketing tools are enabled.

Photographs and stories may reveal sensitive personal information. Do not upload Social Security numbers, government identification, financial-account details, medical records, or information that is not needed for the project.

How we use information

• Create, revise, print, and deliver personalized projects.
• Process deposits, balance payments, refunds, taxes, and disputes.
• Send proofs, approvals, production, delivery, and support communications.
• Secure and troubleshoot the Site and prevent misuse.
• Measure marketing performance and send marketing messages where permitted.
• Meet legal, tax, accounting, and recordkeeping requirements.

When we disclose information

We disclose information only as reasonably necessary to:

• Stripe and payment or fraud-prevention providers.
• Website hosting, private cloud storage, email, and support providers.
• AI-assisted writing, image-editing, and quality-review providers only after they pass our production privacy and contract review.
• Printers, fulfillment providers, and carriers that require the final print file and delivery details.
• Analytics or advertising providers used on public marketing pages.
• Professional advisers, government authorities, or other parties when legally required.
• A successor in a merger, financing, sale, or transfer of the business.

We do not sell Customer Content or personal information for money. Certain state laws may define some advertising disclosures as a “sale” or “sharing”; where applicable, you may submit an opt-out request through our privacy choices.

Private project materials

Customer Content is private by default. We do not place private project materials in a public gallery, advertisement, or portfolio, or use them to train general-purpose AI models, without separate express permission. We do not intentionally place advertising pixels on private upload, proof, project-review, or order-detail pages.

Retention

We retain information only as long as reasonably necessary. Unless you request extended storage for a reorder, we target deletion of working upload files within 90 days after final delivery. Final proofs, transaction records, approvals, and limited order records may be kept longer for support, accounting, fraud prevention, tax, legal, and dispute-resolution purposes. Secured backup copies may remain temporarily.

For a canceled, abandoned, or otherwise inactive project, we target deletion of working upload files within 90 days after cancellation or the last project activity, unless a shorter period is required by law or limited retention is needed for fraud, dispute, or legal records.

Deletion is currently reviewed and completed through our order-operations process rather than a fully automated timer. You may request earlier deletion through our Privacy Request form, subject to records we must retain.

Cookies and marketing

Necessary technologies support security, checkout, and Site operation. Nonessential analytics and advertising technologies will not be enabled without the notices and choices required by applicable law. See our Cookie and Privacy Choices page.

Your privacy rights

Depending on where you live, you may have rights to:

• Confirm whether we process your information and access or obtain a portable copy.
• Correct inaccurate information or request deletion.
• Opt out of qualifying targeted advertising, sale, sharing, or profiling.
• Appeal a decision about a privacy request.
• Exercise privacy rights without discriminatory treatment.

Submit a request through the Privacy Request form. We may verify identity and an authorized agent’s authority before acting.

Children

The Site is not directed to children under 13, and children may not directly place an order or submit information. An adult may create a project involving a child only when the adult is the parent, legal guardian, or otherwise authorized. If we learn that information was collected directly from a child under 13, we will delete it or take another legally required action.

Security, updates, and contact

We use reasonable administrative, technical, and physical safeguards, but no internet system can be guaranteed completely secure. We may update this policy as our service or legal duties change and will post a revised effective date.

Privacy questions and requests may be submitted through our Contact form.