Information we collect
Account information
Your identity-provider subject, email address and basic profile information supplied through Amazon Cognito, Google sign-in or email authentication.
Creation information
Images you upload, creative instructions, generated cards and labels, saved versions, visibility choices, job status and technical metadata needed to create and retrieve your work.
Credits and transactions
Credit balances and ledger entries, Shopify order references, purchased package identifiers and signed attribution data. CardFamous does not receive your full payment-card number; payment is processed through Shopify and its payment providers.
Security and usage information
IP address, browser and device details, request and error logs, authentication events, WAF security signals and affiliate or campaign identifiers when you arrive through a creator link.
How we use information
- Authenticate you and bind credits, jobs and vault assets to your account.
- Send uploads and instructions to the configured AI provider to create requested artwork.
- Store and retrieve generated assets, process purchases and support physical fulfillment.
- Prevent fraud, enforce security and troubleshoot reliability.
- Measure creator referrals through UpPromote when affiliate tracking is enabled.
- Respond to support requests and comply with legal obligations.
Service providers and disclosures
CardFamous uses providers including Amazon Web Services for hosting, authentication, database, storage, security and logs; Google for sign-in and Gemini generation; Shopify and Vanity Slabs for checkout and fulfillment; and UpPromote for creator attribution. These providers process information under their own terms and privacy practices. We may disclose information when required by law or needed to protect rights, safety and service integrity.
Your choices and rights
You may keep creations private, choose what to upload and avoid creator referral links. Depending on where you live, you may request access, correction or deletion of personal information, or object to certain processing. CardFamous does not sell personal information and does not use CardFamous account data for cross-context behavioral advertising.
Retention and security
We retain information while your account and saved creations are active and as reasonably needed for service, security, accounting, legal and dispute-resolution purposes. Retention periods vary by record type and provider. CardFamous uses access controls, encryption in transit, private object storage, signed commerce handoffs and account-scoped authorization, but no system can guarantee absolute security.
Children and international processing
CardFamous is not directed to children under 13, and we do not knowingly collect their personal information. Information may be processed in the United States and other locations where our providers operate.
Privacy requests
Use the secure support form with the subject “CardFamous Privacy Request.” We may need to verify your identity before fulfilling an account-specific request.