Privacy Policy

Last updated: February 19, 2026

Cardmaker ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services.

1. Information We Collect

Information You Provide

• Account information: Email address and password when you create an account
• Order information: First and last name, email address, shipping address (street, city, state, ZIP code, country)
• Card prompts: The text descriptions you submit to generate card designs
• Payment information: Payment details are collected and processed by Shopify — we do not store your credit card number

Information Collected Automatically

• Usage data: Pages visited, features used, and timestamps
• Device information: Browser type, operating system, and screen resolution

2. How We Use Your Information

We use your personal information to:

• Fulfill orders: Process your card design, print, and ship your greeting card
• Communicate: Send order confirmations and respond to support requests
• Improve the Service: Analyze usage patterns to enhance the user experience
• Content moderation: Screen prompts for prohibited content before image generation
• Comply with legal obligations: Respond to lawful requests and prevent fraud

3. How We Share Your Information

We share your information only with service providers that are necessary to operate the Service:

• OpenAI — Your card prompts are sent to OpenAI's API for image generation. See OpenAI's Privacy Policy.
• Shopify — Processes payments and manages checkout. Receives your name, email, and shipping address. See Shopify's Privacy Policy.
• Printify — Prints and ships your card. Receives your shipping address and the generated card image. See Printify's Privacy Policy.
• Memberstack — Handles account authentication. Receives your email address and password. See Memberstack's Privacy Policy.

We do not sell your personal information to third parties.

4. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Order records are kept for accounting and legal compliance. You may request deletion of your account and associated data from our systems by contacting us. Note that data already shared with third-party providers (see Section 3) is subject to their own retention policies.

5. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including encryption in transit (HTTPS) and secure storage practices. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

You may contact us to request information about or deletion of the personal data we hold about you. To protect your privacy, we will verify your identity by matching your request to the email address associated with your order.

7. Do Not Track

We do not use third-party tracking or targeted advertising. Because we do not track you, our website does not alter its behavior in response to "Do Not Track" browser signals.

8. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top. We encourage you to review this page periodically.

10. Contact Us