Privacy Policy

We collect the following categories of information:

• Account information. When you sign in with Google, Facebook, or a one-time email code, we receive your name, email address, and profile image from that provider or from you.
• Photos you upload. Selfies and reference photos you provide to generate cards. These are processed by our image-generation provider and, for signed-in users, stored so you can reuse them.
• Card content. The card types, tones, recipient names, relationships, messages, and sign-offs you create.
• Contacts and calendar data. Names, relationships, email addresses, phone numbers, mailing addresses, birthdays, and events you add to your contact list and calendar.
• Delivery information.Recipient email and mailing addresses you provide when you email or print & mail a card.
• Payment information. When you subscribe, payments are processed by Stripe. We do not store your full card number; we receive limited billing details and subscription status from Stripe.
• Usage data. Basic analytics about how you interact with the Service, collected to operate and improve it.

• To generate, store, and display your greeting cards.
• To deliver cards by email and to print and physically mail cards you request.
• To send birthday, event, and scheduled-send reminders you opt into.
• To create and manage your account, subscription, and credits.
• To process payments and prevent fraud.
• To communicate with you about your account, orders, and service updates.
• To operate, secure, analyze, and improve the Service.

We share information with trusted service providers only as needed to operate the Service. These include:

• fal.ai — AI image generation (processes uploaded photos to create cards).
• Supabase — database and image storage.
• Stripe — subscription payment processing.
• Click2Mail — physical printing and mailing of cards, which requires sharing recipient mailing addresses.
• Resend — transactional and reminder email delivery.
• Google & Facebook — authentication, if you sign in with those providers.
• Vercel — hosting and analytics.

We do not sell your personal information. We share it only with the providers above, when required by law, or to protect our rights and the safety of our users.

We retain your account information, cards, contacts, and related data for as long as your account is active or as needed to provide the Service. You may delete individual cards, photos, and contacts at any time. If you close your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage most of your data directly in your account, or contact us to make a request. You may also unsubscribe from reminder and marketing emails at any time.

We use industry-standard measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

If you have questions about this Privacy Policy or your data, contact us at support@aicardstudio.io.