Privacy Policy

What we collect, and why

• Account — when you sign in with Google: your name, email and profile picture; when you sign in with a code we email you: your email address, which is kept on your account from the moment you ask for a code, even if you never enter it. To sign you in, and to address you by name in order emails. Your account also keeps the language you last used to sign in, so that your sign-in code email is sent in that language.
• Your design — the photos you upload, the text for your sign (such as a family name and apartment number), any instructions and notes you type for the design, your choices (material, size and piece type), and the silhouettes and signs we generate. To create and make your sign.
• Your order — email, and for delivery also your name, phone and address. To take payment, issue a receipt, deliver and support your order. If you cancel, also the ID number you give in your cancellation notice. Your card details, and any ID number the payment page asks for, go to the payment provider. Its payment confirmation may also send us your name, contact details, the last digits, type and expiry of your card, and your ID number; we do not keep what it sends, only a reference to the payment.
• Messages — what you write to us by email (your address and the email itself) or in the contact form: your name, phone, email (if you give it) and message, together with the site language, which of our websites the form was sent from, and your account if you are signed in. So we can reply.
• Partner referral (optional) — if you came from a partner's link or QR code and allowed it: which partner and when, a code derived from your IP address, and your browser details, to credit the partner and spot duplicate referrals.
• Usage analytics and session recording (optional) — only with your consent, and only for visitors in Israel, to diagnose problems and improve the product. Recordings include the sign you design. If you are signed in, this is linked to your account and email.
• Technical data — error reports (with your account ID if you are signed in), page-speed measurements, request counts per IP address or per account, a record of each sign-in (time, IP address and browser), and a log of each AI generation, linked to the design, your account and your email. This is collected with no opt-out in the banner. All of this is used to run and protect the site and make it faster.

You are not legally required to give us any information ‹exception: name and ID number in a cancellation notice — for counsel›. Without your account, design and order details we cannot fulfil an order, and the application cannot be used without the technical data needed for sign-in and to protect the site. Anything marked “optional” you can refuse without affecting your order.

AI processing of your photos

To turn your photos into a silhouette and a sign, we send them, with the text for your sign and any instructions you type, to the AI services of OpenAI, Google and Microsoft (Azure OpenAI: the same OpenAI models, run by Microsoft on its own servers). Under their terms they do not use the images to train models. They keep them for a limited time (OpenAI usually up to 30 days; Microsoft ‹period›).

Keeping photos to improve the product (optional)

If you allow it, we may keep your photos and silhouettes to test and improve how we make signs, and may send them again to the same AI services for that. Please do not allow this for photos of minors. You can withdraw permission at any time in your account menu, and the silhouettes we kept are then queued for deletion, while the photos are deleted on the usual schedule. Copies already in our evaluation set are deleted too, within 28 days of the withdrawal.

Who receives your information

• Storage and hosting: Supabase (EU) and Vercel (servers in Frankfurt; pages are delivered through its worldwide network; logs: United States, kept for up to 1 day). Backups: Supabase (EU), made daily as part of its service and kept for 7 days.
• Making your sign: OpenAI (US), Google (Google servers worldwide) and Microsoft (Azure OpenAI; Microsoft servers worldwide, and anything it keeps is stored in Sweden); conversion to a cutting file: a file-conversion service (EU, Germany).
• Payment and receipts: the card processors Allpay and Grow (Grow through Morning), and Morning, which issues the receipt (Israel; some of their service providers may be outside Israel). The payment page asks you directly for your card details and, usually, your ID number.
• Delivery: Mahir Li (Israel).
• Email: Amazon Web Services — sign-in emails (such as sign-in codes) are sent from Frankfurt, and our other emails, such as those about your order, from Ireland; incoming mail: Cloudflare (worldwide network) and Gmail (Google servers worldwide).
• Sign-in: Google (Google servers worldwide); and, only for signing in with email, Cloudflare Turnstile (Cloudflare's worldwide network), a check that tells people from automated bots. When you open the email sign-in form, or come back to a sign-in with email already in progress in the same tab, your browser loads it from Cloudflare, which receives your IP address and technical data about your browser and device. If you only sign in with Google, without opening the email form, it is not loaded.
• Contact form: Cloudflare Turnstile (Cloudflare's worldwide network), the same check, against automated messages. When you start using the contact form on our home page, your browser loads it from Cloudflare, which receives your IP address and technical data about your browser and device. If you do not use the form, it is not loaded there.
• Error tracking: Sentry (EU); and troubleshooting and support, when we need to look at a specific account or order: Anthropic and OpenAI (US), through the AI tools we use to develop the site. Usage analytics and recordings, with consent: PostHog (EU).
• The partner who referred you, if any, to work out their commission: that you came through them and whether you ordered (as counts), and for orders reported to the partner the date, amount, commission and whether it was refunded. No name or contact details.
• Our accountant, for bookkeeping; and authorities where the law requires.
• Address suggestions at checkout: Google (Google servers worldwide) — what you type in the street field is sent to Google as you type, even if you do not complete the order. Google's Privacy Policy applies to it: https://policies.google.com/privacy

We do not sell your information or use it for advertising; the one exception is a photo of a piece you separately agreed we may show (see Your choices).

How long we keep it

Photos from a design that did not become an order, and the silhouettes and signs made from them — up to 90 days after you last worked on the design or on the cart it is in, unless you allowed us to keep photos or silhouettes to improve the product. The delivery and sign details you entered for a checkout you did not complete — up to 90 days after you last changed your cart. If a payment is still open with the payment provider, everything tied to that payment, including the photos, is kept until we have checked it. Photos from an order, and the silhouettes and signs made from them — while the order is being handled, and up to 24 months after it is delivered, cancelled or refunded (if the design is edited again or put back in a cart, up to 90 days after the design or the cart was last used, if that is later). The sign file of an order and the design copy kept with it, as a production record — ‹period›. Messages, including email correspondence with us — as long as we need them to deal with them. Order records, cancellation notices and receipts — as bookkeeping law requires. Partner referral records — kept with the referral they record, because the partner's commission and our accounts rest on it; the network details of a referral visit (the code derived from your IP address, and your browser details) are deleted 7 years after the end of the tax year of the visit, within a month of that date. Your answers on showing a photo of your piece in advertising, with the wording you saw — kept as the record of what you agreed to, also after the order itself is deleted, so we can show what a published photo rested on. Sign-in records — up to 24 months. An account created when you asked for an email sign-in code, if the code sent to it was never entered and it was never used to sign in with Google — deleted automatically once it is more than 7 days old, by a cleanup that runs regularly, unless it is already linked to records we keep, or we already keep customer or evaluation-labelling records under that address (for example, an order placed with that address), in which case it is kept for as long as those records are. Session recordings — up to 30 days. Usage-analytics events — ‹period›. Page-speed measurements — ‹period›. Error reports and the generation log — up to 90 days. Request counts by IP address or account — until they expire, and are then deleted within 30 days. The address and content of the automatic emails the site sends you — up to 90 days; the record that an email about an order was sent is kept with the order, and an address our emails permanently bounced from, or that reported them as spam, is kept by our mail service with no set end date, so we do not write to it again. Photos and silhouettes you allowed us to keep to improve the product — until you withdraw permission, and then as described above; copies in our evaluation set are deleted within 28 days of the withdrawal. Copies in our backups are removed within a further 30 days.

Cookies and browser storage

Necessary cookies: sign-in, and your language (also kept in your browser's storage). Your answer to the cookie banner is kept in your browser's storage. Optional cookies, only with consent: a partner referral, and PostHog's usage analytics. During payment your browser keeps the IDs of the items in your cart, together with your account's internal ID, to prevent a double order if the connection drops. They can stay in your browser, even after you sign out, until a later checkout confirms what happened to the order or you clear the site's data. After you answer whether to let us keep your photos, your browser also keeps a short note of that answer, with your account's internal ID, until you close the tab. After we email you a sign-in code, this tab's session storage keeps the email address it was sent to, how far your sign-in has got, and its timing (such as when you can ask for a new code), so that reloading the page brings you back to your sign-in instead of starting over. The code itself is never stored there. The address is deleted as soon as your sign-in is complete, if your session turns out to be lost and you need to request a new code, when you start a Google sign-in, when you choose “Use a different email”, or if your account is not allowed to sign in, or must sign in with Google, and in any case when the tab's session ends, normally when you close it. Once the code has expired, reloading no longer restores your sign-in: the sign-in page deletes the record the next time it reads it, and does the same with a record whose time for requesting a new code is later than a real sign-in could have set. While your answer on showing a photo of a piece in advertising is being sent, and afterwards if it cannot be confirmed (the connection dropped), your browser keeps that piece's internal ID, a random ID for the attempt and the time it was sent, so your next answer takes its place. They are used until an answer is confirmed or 30 minutes have passed, and stay in your browser until your next answer on that piece removes them, or until you clear the site's data. No advertising or cross-site tracking cookies.

Your choices

The consent banner has two separate options: usage analytics and session recording, and partner credit. You can change them at any time on this page. Turning partner credit off does not cancel a referral already linked to your account: it keeps crediting the partner until it expires. After an order reaches you, we may ask whether a photo of your piece can be shown on our website and social media; the answer is up to you, is not a condition of anything, and can be changed at any time in My orders. We keep each answer with the wording you saw.

Photos of other people

Upload a photo of other people only if they agree (for a child, with a parent's consent). If you appear in someone else's photo or sign and want it deleted, contact us.

Your rights

You may see the information we hold about you, and ask us to correct or delete information that is wrong, incomplete, unclear or out of date. We will answer within 30 days ‹verify the deadline›. If we refuse, you may apply to the Magistrates' Court. You may also complain to the Privacy Protection Authority.

Open-source software

HEIC photos (for example from an iPhone) are converted in your browser by the open-source library libheif-js, under the LGPL-3.0, unmodified.

Contact

Questions and requests: hello@alromstudio.co.il, 055-288-9855, Ha'Oreg 20, Netanya.