This Privacy Policy ("Policy") describes how Great Ridge Design Co. ("we," "us," or "our"), a business entity organized under the laws of the State of North Carolina, United States of America, collects, uses, stores, discloses, and protects information in connection with your use of the Park Poster Studio website, web application, and any related services (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, do not access or use the Service.
1. Scope and Applicability
This Policy applies to all visitors and users of the Service, regardless of geographic location. The Service is operated from the United States and is intended for users located in the United States. If you access the Service from outside the United States, you understand and consent to the transfer of your information to, and processing of your information in, the United States, where data-protection laws may differ from those in your jurisdiction.
2. Our Core Privacy Commitments
We have intentionally designed the Service to minimize the personal information we collect. In plain language:
- We do not store the photos you upload. Any image you upload to the Service is processed locally inside your web browser while you design. Your source photo is not transmitted to, copied onto, or retained by any server, database, cloud bucket, or other system that we operate or control. The only image file we ever store is the final rendered poster after you complete a paid purchase, which is retained for seven (7) days so that you can re-download it, and then permanently deleted (see Section 8). Free, unpaid designs are never uploaded.
- This is not an AI tool. Your photograph is not sent to, processed by, or used to train any artificial-intelligence, machine-learning, or generative model. The Service applies deterministic, rule-based image transformations (color extraction, cutout masking, layout composition) entirely within your browser.
- There are no user accounts. The Service does not offer account creation or sign-in. You do not have a profile, password, or login with us.
- The only personal information we collect is your email address, and only when you provide it at checkout in order to receive your purchased download. We do not collect your name, mailing address, phone number, date of birth, government identifier, or similar personal information.
- We do not sell or rent your information to third parties for advertising, marketing, or any other purpose.
3. Information We Collect
3.1 Information You Provide Directly
- Email address (collected at checkout only). When you purchase a download, you provide an email address so that we can deliver the receipt and the link to your full-resolution file. This is the only personal information we collect. We use your email address solely to (a) deliver your purchased file, (b) provide transaction receipts and tax records, (c) respond to support requests, and (d) send service-critical notices such as a security advisory or material change to these policies. We do not send marketing email.
The Service does not offer account creation. There is no sign-in, no password, and no user profile maintained on our systems.
3.2 Information We Do Not Collect
- Your uploaded source photographs. All image processing while you design — including color extraction, cutout generation, and poster rendering — occurs entirely within your browser. We do not upload, transmit, store, or retain copies of your source photographs on our servers, in any database, or in any backup system. Your photograph is not transmitted to, processed by, or used to train any artificial intelligence, machine-learning model, or generative model — this is not an AI tool. The only image file we ever store is the final rendered poster after a paid purchase, retained for seven (7) days and then permanently deleted (see Section 8).
- Account credentials. We do not offer accounts and therefore do not collect or store usernames, passwords, password hashes, security questions, or authentication tokens.
- Payment card data. We do not see, collect, or store payment card numbers, CVV codes, or bank account information. All payment processing is handled by Stripe (see Section 5).
3.3 Information Collected Automatically
When you visit the Service, our hosting infrastructure may automatically log basic technical information, such as your IP address, browser type, device type, referring URL, requested URL, and timestamps. This information is used solely to operate, secure, and troubleshoot the Service, and is retained only for the period reasonably necessary for those purposes.
4. How We Use Information
We use the limited information described in Section 3 to:
- provide, operate, and maintain the Service;
- process one-time download fees through Stripe;
- deliver your purchased file and a receipt to the email address you provide at checkout;
- respond to support inquiries;
- detect, investigate, and prevent fraud, abuse, and security incidents;
- comply with applicable law and enforce our Terms of Service.
We do not use your information to build advertising profiles, to perform automated decision-making with legal effects, or for any purpose that is materially incompatible with the purpose for which it was collected.
5. Payment Processing through Stripe
One-time download fees are processed by Stripe, Inc. ("Stripe"). When you initiate a payment, you are redirected to or interact with a Stripe-hosted interface. Stripe collects the payment information necessary to complete the transaction directly from you. We never see and do not store your full payment card number, expiration date, CVV, or bank account details. We receive only a transaction reference and high-level status information (for example, "succeeded" or "failed") sufficient to grant you access to your purchased download. Your use of Stripe is governed by Stripe's own privacy policy and terms, which we encourage you to review.
6. Service Providers
We rely on a small number of vetted service providers to operate the Service. These providers act as our processors and are contractually required to use information only as needed to provide their services. Categories of providers include:
- Hosting and database infrastructure used to record transactions and deliver purchased files to the email address you provided at checkout;
- Payment processing via Stripe;
- Email delivery for sending your receipt and download link;
- Content delivery for static website assets.
We do not share your email address with these providers for any purpose other than operating the Service.
7. Cookies and Local Browser Storage
The Service uses a small number of strictly necessary cookies and a modest amount of local browser storage (specifically, the standard localStorage and sessionStorage APIs built into your browser) to operate. These mechanisms store information only on your own device and are never transmitted to us as user-identifying data.
7.1 What we keep in local browser storage
- Your in-progress design state — template, typography, palette, park name, and similar non-image settings — so that you can refresh the page or come back later without losing your work. This data lives entirely on your device.
- A short-lived access token after you complete a purchase, used to unlock the full-resolution download for the specific design you paid for.
- Non-personal interface preferences such as the most recent settings panel you used.
7.2 What we do not use cookies or storage for
- third-party advertising or retargeting;
- cross-site tracking pixels;
- building behavioral or demographic profiles;
- analytics that identify individual users.
You can clear cookies and local storage at any time through your browser settings. Doing so will erase your in-progress design and may require you to re-enter information; it will not delete your purchase record or transaction history, which is retained as described in Section 8.
7A. No Artificial Intelligence Processing
The Service is not an AI tool. We do not use artificial intelligence, machine learning, generative models, large language models, diffusion models, neural networks, or any similar technology to process, analyze, modify, classify, or stylize your photograph. The poster rendering pipeline is deterministic and rule-based: it samples colors, generates a cutout mask, and composes the output using fixed algorithms running entirely inside your browser. Your photograph is never sent to an AI provider. We do not, and will not without prior notice and your consent, use any image you upload as training data, fine-tuning data, evaluation data, or input to any model.
8. How Long We Retain Information
- Source photographs you upload: never retained — processed in your browser only.
- Final rendered poster files (paid purchases only):after a successful payment, the full-resolution rendered poster corresponding to your purchase is stored on our hosting infrastructure for seven (7) days from the time of purchase. During this seven-day window you may re-download the file from any device using your receipt link. At the end of the seven-day window the rendered file is permanently and automatically deleted from our storage and is no longer available for download under any circumstances. We do not retain rendered posters for free, unpurchased designs at any time.
- Email address provided at checkout: retained associated with your transaction record for as long as required to (a) deliver and re-deliver your purchased file on request, (b) provide customer support, and (c) satisfy our tax, accounting, fraud-prevention, and audit obligations. You may request deletion of your email address at any time using the contact information at the bottom of this Policy; we will honor the request unless retention is required by law.
- In-browser design state: stored only on your own device in local browser storage. Clearing your browser deletes it.
- Transaction records: retained as required by tax, accounting, and consumer-protection laws.
- Server logs: retained for a short period for security and operational purposes.
9. Security
We implement reasonable administrative, technical, and physical safeguards designed to protect the limited information we collect, including encryption in transit (HTTPS), encryption at rest for stored email addresses and transaction records, access controls, and the principle of data minimization. No method of transmission over the Internet or method of electronic storage is completely secure, however, and we cannot guarantee absolute security.
10. Children's Privacy
The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.
11. Your Rights and Choices
Depending on your jurisdiction, you may have the right to (a) access the personal information we hold about you, (b) correct inaccurate information, (c) request deletion, (d) object to or restrict certain processing, and (e) file a complaint with a supervisory authority. To exercise these rights, contact us using the information at the bottom of this page. Because the only personal information we hold about you is the email address you provided at checkout (tied to your transaction record), most requests can be honored simply by deleting that email address from our records, subject to legally required retention.
California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides additional rights, including the right to know, delete, correct, and opt-out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
12. International Users
The Service is operated in the United States. By using the Service, you consent to the processing of any information you provide in the United States.
13. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Material changes will be communicated through a prominent notice on the Service or by email, where appropriate. Your continued use of the Service following the posting of changes constitutes your acceptance of those changes.
14. Contact
For questions or concerns about this Policy, or to exercise any rights described above, contact Great Ridge Design Co. through our shop at Great Ridge Design on Etsy.