Privacy Policy

1. Information We Collect

We collect the following types of information when you use our Services:

• ●Account Information: When you create an account, we collect your name, email address, and authentication credentials.
• ●Uploaded Content: When you use our design tools, art analysis, or submit artwork, we collect the designs, images, and files you upload.
• ●Communication Data: When you use our customer chat assistant or contact us, we collect the messages and content you send.
• ●Usage Data: We collect information about how you interact with our website, including pages visited, features used, and referring URLs.
• ●Technical Data: We collect your IP address, browser type, device information, and session authentication tokens.

2. How We Use Your Information

We use your information to:

• ●Provide, fulfill, and deliver our custom decoration and printing services
• ●Process orders, generate quotes, and communicate about production status
• ●Analyze uploaded artwork for decoration suitability using AI-powered tools
• ●Provide design assistance through our AI chat assistant
• ●Improve our services, website, and customer experience
• ●Send important account, order, and policy notifications
• ●Comply with applicable legal and regulatory obligations

3. Cookies & Session Management

We use session tokens to authenticate you and maintain your logged-in state. Session tokens are stored securely using server-side hashing and expire after a set period. We do not use third-party advertising or tracking cookies. You can clear session tokens by logging out or clearing your browser storage.

4. Information Sharing

We share your information with the following categories of service providers:

• ●AI Services: We use OpenAI to power our artwork analysis tool and customer chat assistant. Uploaded designs and chat messages may be processed by these services to generate AI-powered responses and analysis.
• ●Payment Processors: When you make a payment, your payment information is handled by our payment processor. We do not store full credit card numbers on our servers.
• ●QuickBooks: For internal staff use, certain customer and order information may be accessed through QuickBooks by authorized employees for order management and customer service. This access is restricted by employee authorization scope and is audit-logged.

We do not sell your personal information. We share information only as described in this policy, with your consent, or as required by applicable law.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

5. Data Retention

We retain your account information for as long as your account is active. Uploaded designs are retained to facilitate reordering, production records, and quality reference. Chat messages are retained for service improvement and quality assurance. Technical and usage data is retained for a reasonable period and then deleted or anonymized. You may request deletion of your data as described in Section 6, subject to legal and business record retention requirements.

6. Your Rights

You have the following rights regarding your personal information:

• ●Access: You can request a copy of the personal information we hold about you
• ●Correction: You can request that we correct inaccurate or incomplete information
• ●Deletion: You can request that we delete your personal information, subject to legal retention requirements
• ●Opt-Out: You can opt out of promotional communications at any time by following the unsubscribe link or contacting us

To exercise any of these rights, please contact us through our Contact page. We will respond to your request within a reasonable timeframe.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including encrypted session token hashing, server-side credential storage, role-based access controls for internal tools, and audit logging for sensitive data access. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Children’s Privacy

Our Services are not directed to children under thirteen (13) years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

9. Internal Sales AI

Our internal Sales AI assistant is available to authorized Kustom Kreations employees only. It accesses customer and order information through QuickBooks to assist sales staff with customer inquiries. Customer information accessed through the Sales AI is limited to the employee’s assigned authorization scope and all access is audit-logged. The Sales AI is not available to customers or the public, and customer data is never exposed to the AI model without prior server-side authorization validation.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last Updated" date. Your continued use of the Services after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through our Contact page.