Privacy Policy

Last updated: April 2026

What we collect

When you create a card, we store the recipient name, occasion, relationship, tone, personal details you provide, and the generated message. This data is used solely to create and deliver your card.

How we use your data

  • To generate personalized card messages using AI (OpenAI)
  • To render and store your card for viewing and download
  • To process payments via Stripe

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-party services

  • OpenAI: We send card details (recipient info, occasion, personal details) to OpenAI's API to generate messages. OpenAI's usage policies apply.
  • Stripe: Payment processing is handled by Stripe. We do not store your credit card information. Stripe's privacy policy governs their handling of payment data.

Data retention

Card data is retained for 90 days after creation to allow sharing and re-downloading. After 90 days, card data may be automatically deleted.

Cookies

We use minimal cookies required for site functionality. We do not use tracking cookies or analytics cookies.

Your rights

You can request deletion of your card data at any time by contacting us. If you are in the EU, you have rights under GDPR including the right to access, correct, and delete your data.

Contact

For privacy-related questions, contact us at privacy@cardcraft.io.