Privacy

We keep this small. When you buy, Stripe's checkout collects your name, email and shipping address and passes them to us so we can fulfil the order. Your card number never touches our servers — Stripe holds it.

If you commission a sign, we keep the text you type and the images it produces, so we can show them to you and print the one you buy. A cookie holds an anonymous session id that counts your studio runs; it identifies a browser, not a person.

If you create an account, we keep your email and your order history so you can see your own orders and renders.

Each service does one job, and only sees what that job needs:

• Stripe — payment. Card details, billing and shipping address.
• Prodigi and Printful — print and apparel fulfilment. Your name, shipping address, email and the artwork file.
• OpenAI — renders commissioned art from the text you enter, and screens that text for prohibited content.
• Claid — enlarges the artwork file to print resolution. Image only, no personal details.
• Resend — sends order emails to the address you gave at checkout.
• Vercel — hosts the site and stores artwork images.
• Supabase — account sign-in and order records, if you create an account.
• Upstash — the anonymous studio-run counters.

We do not sell or rent your data to anyone, and we run no advertising trackers.

Digital download links stay live for 30 days. Renders and orders stay visible in your account for one year. Order records themselves we keep as long as bookkeeping and dispute handling require.

To see, correct or delete what we hold about you, write paintedalways@gmail.com. That inbox is monitored by the people who run the shop, and it is the same address for every privacy question this page doesn't answer.