Skip to content

Version 1.0 · effective 12 September 2026

Privacy Policy

Privacy Policy

**Brand:** With A Trace **Version:** 1.0 **Effective Date:** [EFFECTIVE DATE] **Operator:** [LEGAL ENTITY NAME] (“With A Trace,” “we,” “us,” or “our”) **Contact:** [CONTACT EMAIL] **Business address:** [BUSINESS ADDRESS]

This Privacy Policy describes how we handle personal information when you use our website, submit a commission request, pay, or work with us on a With A Trace deck.

It is written for the current MVP: a Framer marketing and commission site, a customer application, and vendors we use to operate.

---

1. Who is responsible

[LEGAL ENTITY NAME] operates With A Trace.

For privacy questions or requests, write to [CONTACT EMAIL].

---

2. Information we collect

We collect information you provide, information created in your project, and limited technical information.

**Commission and customer details**

  • names
  • email address
  • phone number
  • wedding date
  • expected deck quantity or guest count
  • shipping destination
  • country
  • notes you choose to include

**Creative and project information**

  • relationship and story answers
  • uploaded photographs and images
  • artwork references
  • messages and other communications with us
  • approvals, revision requests, and related project records

**Payment-related information**

We do **not** store complete card numbers. Stripe processes payment methods. We may receive identifiers (such as a Stripe customer id), payment method type or last four digits if Stripe provides them, charge status, amounts, timestamps, and similar metadata needed to bill, refund, and keep records.

**Technical information**

  • device, browser, and approximate technical logs reasonably generated by hosting
  • pages or events recorded by analytics, if enabled
  • information from cookies or similar technologies on the marketing site or application

We do not collect Social Security numbers as part of this service.

---

3. How we use information

We use personal information to:

  • review and accept or decline commission requests
  • communicate with you about your commission by email and phone
  • charge authorized amounts through Stripe
  • create, revise, and (if you elect) manufacture your deck
  • coordinate shipping
  • operate, secure, and improve the website and customer application
  • keep financial, tax, and business records we are required or reasonably need to keep
  • detect fraud, abuse, or technical problems
  • comply with law

We use phone numbers for commission and customer communication (review questions, scheduling, payment issues, production, shipping). **Entering a phone number is not consent to marketing texts.** If we use marketing SMS later, we will collect that consent separately.

---

4. How we share information (by purpose)

We do not sell your personal information.

We share information only as needed for a purpose, not by sending every category of data to every vendor.

**Payment.** Stripe receives the payment information you submit to Stripe and related transaction data. We receive status and identifiers, not your full card number.

**Hosting and database.** Infrastructure providers such as our application host and database provider (currently including Vercel and Supabase) store and process account, commission, and project data needed to run the service.

**Marketing site.** The public marketing and commission pages may be served by Framer. Framer processes information you enter on those pages and ordinary technical data for hosting.

**Email.** Our email provider (currently Resend) processes the addresses and content needed to send transactional email.

**Analytics.** If enabled, analytics tools (currently including PostHog) may receive technical and usage events. We configure analytics to support operating the business, not to publish your story or photographs.

**Advertising technologies.** The marketing site may use advertising or measurement tools, which can include Meta / Meta Pixel. Those tools may collect device and browsing information on pages where they run, according to their own policies. They are not used to hand your uploaded wedding photographs to advertisers as a gallery.

**Security and performance.** Network or security providers such as Cloudflare may process technical request data.

**Background processing.** Job-running tools such as Trigger.dev may process operational events needed to send reminders or run internal tasks.

**Creative fulfillment.** Independent designers or contractors working on your commission may see the story, references, and photographs reasonably required to do the work, under confidentiality and use limits we impose.

**Manufacturing and delivery.** Printing and manufacturing vendors receive the artwork and specifications needed to produce the order. Shipping carriers receive the name, address, and contact details needed to deliver.

**Legal.** We may disclose information if required by law, to protect rights and safety, or in connection with a sale or reorganization of the business, subject to appropriate safeguards.

A vendor listed here does **not** automatically receive every category of information.

---

5. Cookies and similar technologies

Our marketing site and application may use cookies or similar technologies to operate the site, remember a session, understand traffic, and — on marketing pages — measure or advertise where those tools are installed.

You can control cookies through your browser. Blocking some cookies may affect site features. Advertising controls may also be available through Meta and similar platforms.

---

6. Analytics and advertising

Analytics help us understand whether the site works and which pages are used.

If Meta Pixel or similar advertising tools run on the marketing site, Meta may receive information about your browser and that visit. That is separate from the photographs and stories you later upload for a commission. We do not treat your private project files as an advertising audience list.

---

7. Payment processing

Stripe provides payment-method collection, validation, storage for future charges, and charges we request under the Payment Authorization.

Stripe acts as an independent payment processor. Stripe’s handling of card data is governed by Stripe’s terms and privacy policy. We instruct Stripe to charge only as authorized: no design fee at submission; the applicable design fee if we accept; production amounts only after you approve artwork and elect to manufacture.

---

8. Production and manufacturing vendors

If you elect manufacturing, production partners receive what they need to print and pack the order (approved artwork, quantity, specifications). They are not given your full relationship questionnaire for their own marketing.

Shipping carriers receive delivery details.

---

9. Communications

We send transactional messages about your request, acceptance, payment, assessment, proofs, production, and shipment.

We may call or text for the same operational reasons. That is not marketing-SMS consent.

If we send optional marketing email, we will provide a way to opt out of that marketing. Transactional project email is not a marketing list.

---

10. Retention

We keep information as long as reasonably needed for the commission, reorders if offered, customer support, legal claims, and records we must keep.

  • **Payment and invoice records** are kept for the period required by tax and accounting rules.
  • **Project files, artwork, and correspondence** are kept while the project is active and for a reasonable period afterward so we can support you and document what was approved.
  • **Reference photographs** are used to create the deck. We may delete or stop using them when they are no longer needed for the commission, a reorder you asked us to support, a dispute, or a legal hold. We do not promise a specific deletion date in this policy.
  • **Marketing-site analytics** follow the retention of those tools as configured.

If you ask us to delete information, we will consider the request and retain what we must (for example paid invoices, consents, and records of what was manufactured).

---

11. Security

We use reasonable administrative, technical, and organizational measures appropriate to a small studio handling commission and project data, including storing photographs in private storage rather than a public gallery, and relying on Stripe for card data.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

---

12. Your choices and requests

You may ask us to:

  • provide a copy of personal information we hold about you
  • correct inaccurate information
  • delete information we are not required to keep
  • withdraw optional marketing or portfolio permission

Write to [CONTACT EMAIL]. We may need to verify that you are the person making the request. We will respond in the time required by applicable law, or otherwise within a reasonable time.

We may decline a request where an exception applies (for example, information we must keep for tax, fraud prevention, or an ongoing commission).

---

13. U.S. state privacy rights

Some U.S. states give residents additional rights (access, correction, deletion, and, in some states, appeals or limits on certain data uses).

If a law of that kind applies to your information and to us, we will honor it. We do not sell personal information. We do not use your commission photographs for third-party advertising.

To exercise a state privacy right, write to [CONTACT EMAIL] and tell us which state you are in. If we deny a request where an appeal is required, we will tell you how to appeal.

We are a small studio. Some statutes include exceptions or thresholds. Where a law does not apply, we may still consider a reasonable request as a customer-service matter.

---

14. International users

We operate in the United States. If you are outside the United States, your information will be processed in the United States and in other locations where our vendors operate.

Those countries may have different data-protection rules than your home country. International shipping may also involve customs authorities and carriers in the destination country.

---

15. Children

The Services are for adult purchasers. We do not knowingly collect personal information directly from children under 13, and we do not direct the Services to children.

You may upload a photograph that includes a child only if you have authority to do so for this commission. We use that photograph to create the deck, not to create an account for the child.

---

16. Changes

We may update this Privacy Policy. The new version and effective date will be posted. The version presented when you submit a commission applies to that submission, together with later changes that the law allows or that you agree to.

---

17. Contact

[LEGAL ENTITY NAME] [BUSINESS ADDRESS] [CONTACT EMAIL]