Privacy Policy
This describes the data the platform actually holds today — not a generic template. If we start collecting something new, this page changes with it.
Who controls the data
IARTSHOW CORP, 221 McKibbin St, Brooklyn, NY 11206. Reach us at hello@aiframing.com.
When a studio embeds our widget, that studio is the controller of its own customers' data and we act as its processor — see the Data Processing Addendum.
What we hold
| Data | Why |
|---|---|
| Studio account: name, email, city, ZIP, password hash | To run your account and approve it |
| Partner account: name, email, affiliation, payout details | To attribute referrals and pay commission |
| Customer order: name, email, phone, shipping address | To produce, ship and support the order |
| Artwork files and framing configurations | To render previews and produce the piece |
| Quote requests: contact details, chosen framing, mockup | To reply with a price, and to see which frames get chosen |
| IP address against certain endpoints | Rate limiting — to stop brute-force and signup floods |
We never see or store card numbers. Payment details go directly to Stripe; we hold only a payment reference and the amount.
Why we are allowed to hold it
- Contract — account data and order data: we cannot make and ship a frame without them.
- Legitimate interests — rate-limit records and which frames are chosen, to keep the service secure and to decide what to stock. Both are narrow and neither is used to profile anyone.
- Legal obligation — transaction records we are required to keep.
Who it goes to
- Stripe — payment processing
- Resend — transactional email
- Supabase — database and file storage
- Vercel — hosting
- Replicate — image processing, where a product uses it
- EasyPost and the carrier — shipping labels and tracking
- Our production partners — the workshop that makes and ships the piece
We do not sell personal data, and we do not share it for advertising. Nobody receives it except to perform one of the jobs above.
How long we keep it
Order and transaction records: seven years, for tax and accounting. Artwork files: kept while the account is open so an order can be reprinted, then deleted on request. Rate-limit records: rolling, and pruned. Accounts: deleted on request except for records we must retain.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@aiframing.com and we will act within 30 days. If you are in California, the CCPA rights to know, delete and opt out of sale apply — we do not sell data, so there is nothing to opt out of. If you are in the EU or UK, the GDPR rights apply and you may complain to your supervisory authority.
Cookies
We use a session cookie to keep you signed in, and nothing else. There is no advertising or cross-site tracking on this site, which is why you are not being asked to accept anything.
Children
The service is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes materially we will tell account holders by email rather than quietly changing the date at the top.