Privacy Policy

1Introduction

This policy describes how GivingPrints handles the information we collect when you visit givingprints.com, create an account, place an order, or otherwise use our service. It applies to our website and the related tools we use to design, produce, and ship your cards.

By using GivingPrints, you agree to the practices described here. This Privacy Policy is part of, and incorporated into, our Terms of Service.

2Information We Collect

1. Information you give us. You are always aware that you are providing this information, because you type it yourself. This includes:

• Account information, such as your name and email address when you sign up.
• Order information, such as the shipping and billing details needed to complete and deliver your order.
• Photos and card content you upload or enter to design your cards (see Section 6).
• The nonprofit you choose to support with your purchase.
• Messages you send us, such as support requests or feedback.
• Marketing preferences, such as signing up for our mailing list.

2. Information from your use of the service. We collect only what operating the service actually requires: your orders, the technical session that keeps you signed in and your cart and card designs intact as you move through the steps, and basic security and error logs (including your IP address and web requests) that help us diagnose problems, prevent abuse, and keep the site running. We run no advertising pixels and no session-replay tools, we set no analytics cookies, and we do not track how you move across other companies’ websites.

We do use a third-party product-analytics service, in a cookieless, anonymous configuration. We use it to understand how the site is used in aggregate, to measure how often people complete important steps (like finishing a card or checking out), to find technical failures, and to improve the usability and reliability of the service. In this configuration, it sets no cookie and stores nothing in your browser, builds no profile of you, and is not used to identify you or track you across other companies’ websites. It never receives your photos, card text, greetings, recipient or mailing addresses, or payment details — only anonymized technical and usage events, such as a page being viewed or a step being completed.

3. Cookies and similar technologies. We use only essential (strictly necessary) cookies — the ones the service needs to work. We do not use advertising or analytics cookies, and because we don’t, there is no cookie consent banner (none is required). Our product analytics (PostHog, described in Sections 2 and 4) works without cookies or any browser storage, so it does not change this. The essential cookies we set are:

• sb-* — keep you signed in and manage your session (set by Supabase, our authentication provider).
• gp_guest — an anonymous session identifier so your uploads and cart stay with you as you build an order, even before you sign in. It holds no personal identity.
• gp_attr — a signed cookie that holds the marketing tags present on the visit that brought you here (things like campaign parameters, an ad-click identifier, and the referring site). It contains no identity and no browsing history, and it is used once, at checkout, only to record how your order arrived.

You can control or disable cookies through your browser settings, though some features may not work properly without the essential ones.

4. Information from signing in with Google, Apple and Microsoft. If you choose to sign in using your Google, Apple or Microsoft account, they share basic profile information with us, such as your name and email address, so we can create and log you into your account.

5. Information from the causes we support. From time to time, a nonprofit organization may share basic mailing-list information with us so we can help raise awareness of their work, within the limits of their privacy policy, our policy, and the CAN-SPAM Act.

3How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Produce, package, and ship your order.
• Process your payment and handle taxes, refunds, and disputes.
• Direct the charitable giving connected to your purchase (see Section 5).
• Respond to your questions and provide support.
• Send you transactional messages, such as order confirmations and shipping updates.
• Send you marketing emails, if you’ve opted in, which you can stop at any time.
• Keep our service secure, troubleshoot problems, and make it better.

4How We Share Your Information

We do not sell your personal information. We share it only in the limited situations below.

1. No advertising sharing. We do not sell your personal information, and we do not share it with advertising platforms or for cross-context behavioral advertising.

2. With service providers who help us run GivingPrints. We rely on trusted companies to operate the service, and we share only what each one needs to do its job. Each of them processes your information on GivingPrints’ behalf. These include:

• Stripe — payment processing. Your full card details go directly to Stripe over a secure connection; we never see or store your full card number.
• Supabase — our database and authentication.
• EasyPost — shipping labels and tracking.
• Smarty — address verification for cards we mail on your behalf (address fields only; no names).
• TrueNCOA — USPS change-of-address matching for addresses saved in your address book (name and address), run periodically.
• Resend — transactional email (order confirmations, shipping updates).
• Brevo — marketing email, if you’ve opted in.
• Pledge — charitable donation processing (see Section 5).
• Cloudflare Turnstile — bot and abuse prevention.
• Vercel — website hosting.
• Our commercial print partner(s) — printing and mailing your cards.
• Anthropic — automated analysis of the optional feedback you leave in our post-purchase survey.
• PostHog — cookieless, anonymous product analytics, hosted in the United States. It receives only anonymized technical and usage events — such as page views without any identifier, completion of a step, and error categories — and never your photos, card content, recipient or mailing addresses, payment data, or the nonprofit you choose. It sets no cookie and stores nothing in your browser, and does not build a profile of you. If your browser sends the Global Privacy Control (GPC) signal, we do not load PostHog at all. You can read PostHog’s privacy documentation at posthog.com/privacy.

These providers are permitted to use your information only to perform services for us, and are required to keep it confidential.

3. When compelled by law. We will share personal information if we have a good-faith belief that doing so is reasonably necessary to:

• meet any applicable law, regulation, legal process, or enforceable governmental request;
• enforce our Terms of Service, including investigating potential violations;
• detect, prevent, or address fraud, security, or technical issues; or
• protect the rights, property, or safety of GivingPrints, our customers, or the public.

5How Charitable Giving Works

We’ve designed our giving model to protect your privacy. We never share your personal information with Pledge or with the nonprofit organizations.

GivingPrints gives from its own profits — you are buying a product, not making a personal donation. We send Pledge (Pledgeling Foundation, a registered 501(c)(3) public charity, EIN 46-2440594) funds and instructions for which nonprofits the funds are intended. Pledge then distributes those funds to the individual nonprofits. The only donor the nonprofits see is GivingPrints.

If you’d like to understand how Pledge handles information on its own website, you can read its privacy policy at pledge.to/privacy.

6Your Photos and Card Content

The photos and text you upload to design your cards are personal, and we treat them that way.

• We use your uploaded photos and card content only to design, produce, and ship the cards you order.
• We store them securely and share them only with the printing partner that fulfills your order.
• We do not use your photos to train any technology, and we do not sell them or use them for advertising.
• You can delete photos and saved card designs from your account. We remove them from your account right away and permanently delete them from our systems in the normal course of business, except where we must briefly retain them to complete an order in progress.

You are responsible for the content you upload. If your photos include images of other people, including children, please make sure you have the right to use them.

7Your Privacy Rights and Choices

You have control over your information, and we want exercising that control to be easy.

1. Access, correct, delete, and export. You can ask us to:

• tell you what personal information we hold about you,
• correct information that is wrong,
• delete your information (subject to the retention exceptions in Section 8), and
• give you a copy of your information in a portable format.

To make a request, email privacy@givingprints.com or use the tools in your account. To protect you, we will verify your identity before acting on a request — usually by confirming you can sign in to your account — and we’ll respond within 45 days. These choices are available to every customer, regardless of which state you live in.

2. Marketing email. Every marketing email includes an unsubscribe link, and we honor opt-outs promptly in line with the CAN-SPAM Act. Turning off marketing email won’t stop essential messages about your orders. Our mailing address is 3200 West End Ave, Suite 500, Nashville, TN 37203.

3. Global Privacy Control (GPC) signal. If your browser sends the Global Privacy Control (GPC) signal, we honor it and do not enable the 3rd party product analytics software.

8Data Retention and Deletion

We keep personal information only as long as we need it for the purposes described in this policy.

• Order and financial records are kept as long as required for tax, accounting, audit, and charitable-giving reporting obligations, even after you close your account.
• Photos and card designs are kept while your account is active or until you delete them. When you delete them, we remove them right away and permanently delete them from our systems in the normal course of business.
• Marketing information is kept until you unsubscribe or ask us to remove it.
• Recipient names and addresses you add for envelope addressing (in your address book or on an order) are kept so we can print your envelopes — and, if you ask us to mail your cards for you, so we can address and mail them — and so you can reuse your list for future cards. Addresses saved on a completed order are retained with that order’s records; you can edit or delete address book contacts at any time. The results of an address check (the standardized form of the address and the delivery signals the Postal Service returns) are kept with the address and refreshed whenever we re-check it; a copy without any name may be kept for up to 180 days so the same address isn’t checked twice.

You can ask us to delete your account at any time by emailing privacy@givingprints.com. We’ll permanently delete the information we’re not legally required to keep, and we’ll let you know what, if anything, we must retain and why.

9Security, Children’s Privacy, and Changes

1. Security. We use secure (SSL/TLS) connections to protect your information in transit, and your full payment card details are handled directly by Stripe rather than stored by us. We also use physical, electronic, and procedural safeguards to protect the information we hold and help prevent unauthorized access. No system is perfectly secure, but we work to keep your information safe.

2. Children’s privacy. GivingPrints is not directed to children under 13, and we do not knowingly collect personal information from them. Because customers sometimes upload photos that include children, the adult account holder is responsible for any content they upload. If you believe a child has provided us personal information, please contact us at privacy@givingprints.com and we will remove it.

3. Changes to this policy. Our Privacy Policy may change from time to time. We’ll post any changes on this page and update the date above, and if the changes are significant, we’ll provide a more prominent notice on our website.

4. Contact us. Questions, requests, or concerns about your privacy? Email us any time at privacy@givingprints.com.