Privacy Policy

Last updated: May 20, 2026

Ki’iCards ("we," "our," "us") respects your privacy. This policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

When you place an order: name, email address, mailing/delivery address, and the photo you upload. Payment details (credit card, etc.) are processed directly by Stripe and are never stored on our servers.

When you contact us: name, email address, and any information you include in your message.

Automatically: we use Google Analytics (GA4) to collect anonymized usage data such as pages visited, browser type, device type, and general location. This helps us understand how people use the site and improve the experience. No personally identifiable information is sent to Google Analytics.

2. How We Use Your Information

We use your information to fulfill your order (print and mail your postcard or print), send order status updates via email, respond to support requests, and improve our website and service. That’s it. We don’t use your data for advertising or profiling.

3. Your Photos

Photos you upload are used solely to produce your order. We store them on secure servers for the purpose of printing and order reference. We do not share, sell, or display your photos publicly. You may request deletion of your photos by contacting us through our support page.

4. Sharing Your Information

We do not sell or rent your personal information. We share information only with the service providers necessary to fulfill your order and operate our business:

Stripe — payment processing. SendGrid — order confirmation and status emails. USPS — shipping and delivery. Google Analytics — anonymized site usage data.

5. Cookies

We use a small number of cookies to operate the site. These include a session cookie for admin authentication and a cookie used for internal pricing testing. We do not use third-party advertising cookies.

6. Data Retention

We retain order information (email, shipping address, order details) for business and legal purposes. Uploaded photos are retained for order fulfillment and support. Orphaned uploads (photos uploaded but never attached to an order) are automatically deleted within 24 hours.

7. Security

We use HTTPS encryption for all data in transit. Payment processing is handled entirely by Stripe, which is PCI-DSS compliant. We implement rate limiting, brute-force protection, and secure authentication for our administrative systems.

8. Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us through our support page. We will respond within 30 days.

9. Children’s Privacy

Ki’iCards is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page.

11. Contact

Questions about your privacy? Reach out through our support page.