1. What We Collect
- Account information: email address and display name when you create a Creator account.
- Order information: name, shipping address, and email address provided at checkout by Buyers.
- Payment information: payment is processed entirely by Stripe. We never see or store your full card number. We store the Stripe payment intent ID and session ID for order tracking.
- Usage data: standard server logs (IP address, browser type, pages visited) collected automatically when you use the Service.
- Creator content: images you upload are stored on Amazon S3 and served via CloudFront. We store metadata (filename, drop association) in our database.
2. How We Use Your Information
- To create and maintain your account and authenticate you.
- To process and fulfill orders (passing your shipping address to our print partner).
- To send transactional emails: order confirmations, shipping notifications, and Creator sale notifications.
- To calculate and transfer Creator payouts via Stripe Connect.
- To improve the Service and diagnose technical issues.
We do not sell your personal information. We do not use your data for advertising profiling.
3. Third-Party Service Providers
We share your information only with the third parties necessary to operate the Service:
- Stripe — payment processing and Creator payout transfers. Stripe's Privacy Policy applies to data they collect.
- Gelato — our print fulfillment partner. Buyer name and shipping address are shared with Gelato solely to produce and ship your order.
- Resend — transactional email delivery. Your email address is shared to send you order and shipping notifications.
- Supabase — our database and authentication provider. Data is stored in servers located in the United States.
- Amazon Web Services — image storage (S3) and content delivery (CloudFront).
4. Data Retention
We retain order records (including buyer name, email, and shipping address) for at least 7 years for tax and legal compliance. Creator account data is retained for as long as your account is active. You may request deletion of your account by contacting us — we will delete your personal data except where retention is required by law.
5. Cookies
We use strictly necessary cookies to maintain your login session. We do not use tracking cookies or third-party advertising cookies.
6. Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal data, or to restrict or object to certain processing. To exercise these rights, email us at support@pressframe.co. We will respond within 30 days.
7. Children
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of material changes by email or a prominent notice on the Service. Continued use after changes take effect constitutes acceptance.