Privacy policy

Information you provide: child name, child age, optional uploaded child photo, and any support messages you send us.

Order information: order ID, pack selection, output format, and purchase confirmation details from Stripe Checkout.

Contact information: delivery email address when provided at checkout or in support requests.

Technical information: IP address, browser/device metadata, and server logs needed for security, fraud prevention, and service reliability.

Local browser storage: we store draft form values in your browser using local storage so your progress is not lost if you refresh.

• Provide preview, checkout, personalization, and PDF delivery.
• Process payments and prevent abuse or fraud.
• Generate personalized pages from your selected pack inputs.
• Send order-ready notifications and provide support.
• Comply with legal obligations and enforce our Terms of Service.

We share data only as needed to operate the service, including with service providers such as:

• Stripe for hosted checkout and payment processing.
• Supabase for database and secure file storage.
• OpenAI for image generation used to personalize pages.
• Resend for transactional order emails.

We may also disclose information when required by law, to protect rights and safety, or in a business transaction such as a merger or asset sale.

We do not sell personal information. We also do not share personal information for cross-context behavioral advertising.

• Uploaded photos linked to an unpaid draft expire after approximately 24 hours and are removed during cleanup.
• After successful paid generation, personalization input snapshots are cleared and uploaded child photos are deleted from active storage.
• Final order PDFs remain available for a limited download window (currently 30 days by default), then are removed.
• We may keep limited transaction and compliance records longer where required for legal, tax, fraud, or accounting obligations.

Our service is intended for adults (for example, parents and guardians), not for children to use independently. If you upload a child photo or provide child details, you confirm you are authorized to do so.

If you believe a child provided personal information directly without parental authorization, contact us and we will investigate and delete the data as appropriate.

We use technical and organizational safeguards designed to protect personal information. No internet transmission or storage system is guaranteed to be 100% secure.

You may request access, correction, deletion, or a copy of certain personal information we hold, subject to legal exceptions.

California residents may have rights under the CCPA/CPRA, including rights to know, delete, correct, and opt out of sale or sharing. Because we do not sell or share for cross-context behavioral advertising, we process qualifying opt-out signals (including Global Privacy Control) as a no-sale/no-share preference where required.

To exercise rights, email support@printablepartykits.example. We may need to verify your request before completing it.

We and our service providers may process information in countries other than your own. Where required, we use contractual and organizational safeguards for cross-border transfers.

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date.

Privacy and data requests: support@printablepartykits.example