Privacy Policy

Information we collect

We collect the following categories of information:

• Account information. Email address and a user-chosen display name when you create an account.
• Order information. Sender name and return address, recipient name and mailing address, the message you write for your card, and payment metadata returned by our payment processor (we do not see or store full card numbers).
• Photos and AI-generated images.Photos you upload and the AI-illustrated images we generate from them, stored on our cloud image storage and used only to create and print your card, never for marketing, and never sold. Photos and images on unfinished drafts are deleted together with the draft (see Drafts below). When you purchase a card, the finished artwork is kept with your order so your account library and reordering keep working; the original photo you uploaded is automatically deleted from our storage about 30 days after your order. You can ask us to delete the artwork sooner by contacting support. Note that copies sent to our printing and mailing partner remain associated with your order record there for the partner’s own retention period.
• Drafts. Cards in progress that you save without checking out. Drafts you have not interacted with for 30 days are automatically deleted. With an account, we keep them for up to one year instead.
• Product analytics. Page views, page-leave events, and specific actions you take (such as starting a card, applying a style, or completing a purchase). When you sign in, analytics events are associated with your account; otherwise they are associated with a randomly generated identifier stored in your browser.
• Standard server logs. Our hosting and service providers automatically receive routine technical information associated with any web request, including your IP address, browser type and version, device information, referring page, and request timestamps. We use this data to operate the service and protect it against abuse.

How we use your information

We use the information we collect to provide the service: to transform your photo into card art, to print and mail your card to your recipient, to process your payment, to send you order confirmations and delivery updates, and to operate, maintain, and improve our website. We also use some of it to measure and improve our advertising, as described under Advertising below.

If you opt in at checkout (or turn it on in your account), we also send occasional card ideas and offers by email, just a few a year. Every one of those emails includes an unsubscribe link, and you can switch them off any time from your account page. Order confirmations and delivery updates aren’t affected.

Service providers we share information with

We share information with third-party service providers who help us operate our service. They may only process the information for the purposes we direct. The categories of providers are:

• Payment processor
• Database and authentication provider
• Cloud hosting and content delivery providers
• Image storage providers
• AI image generation providers
• Card printing and mailing fulfillment partner
• Product analytics provider

We do not sell your personal information. Separately from the service providers above, we share limited activity information with Meta for advertising. Meta is a third party that also uses that information for its own purposes, not a service provider acting only on our instructions. The next section describes exactly what is shared, and you can opt out at any time under Your privacy choices below.

Advertising

To let people know Warmly Written exists, we advertise on Meta platforms (Facebook and Instagram). To measure whether those ads work and to reach people likely to enjoy the service, we use Meta’s advertising tools: a small script in your browser (the “Meta pixel”) and a direct server connection. Together they may send Meta information such as the pages you visit, when you start checkout or complete a purchase, the order amount, your IP address, browser and device information, Meta’s cookie identifiers, and, for purchases, a hashed (scrambled, not readable) version of your email address that Meta can only match against its own user records. Some of these identifiers also pass through our payment processor as part of order metadata. We never send Meta your photos, your card artwork, the message on your card, or the names and mailing addresses on your orders.

Meta uses this information as described in its own privacy policy. Under some U.S. state privacy laws this counts as “sharing” personal information for targeted advertising. You can opt out at any time using the toggle under Your privacy choices below, or by turning on the Global Privacy Control setting in your browser. We honor both, and the advertising tools stay off for you.

Cookies

We use first-party cookies and similar technologies for authentication (so you stay signed in), product analytics (so we can understand how the site is used), and fraud prevention during checkout (set by our payment processor). Unless you opt out (see Your privacy choices above), the Meta pixel also sets advertising cookies on our site (_fbp, _fbc), which Meta uses to match your visit to its ads. You can manage cookies through your browser settings; disabling them may break parts of the site, including signing in and checking out.

We do not currently respond to Do Not Track browser signals, but we do honor the Global Privacy Control (GPC) signal as an opt-out of advertising sharing. Apart from the Meta advertising tools described above (which you can turn off), we do not allow third parties to collect information about your activity across other websites through our site.

Data retention

We retain your information for as long as necessary to provide the service and comply with our legal obligations. Specific automatic deletion timelines are described above (saved drafts and their photos and images: 30 days, or up to one year with an account; original uploaded photos on purchased orders: about 30 days after purchase; purchased-card artwork: kept with your order).

Updating or deleting your information

You can update your account information from your account page. To request a copy of your data or to delete your account and associated data, email us at support@warmlywritten.com and we will process your request promptly.

Security

We use reasonable security measures to protect your information, including encrypted transport (HTTPS) and access controls on our database. No system is perfectly secure; we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent version. Continued use of the service after we publish updates constitutes acceptance of the updated policy.

Contact

For questions about this policy or about how we handle your data, email support@warmlywritten.com.