Legal
Privacy Policy
Last updated: August 22, 2026
1. Information We Collect
Information you provide
- Order & contact information: name, email address, shipping address, phone (if provided).
- Billing information: processed directly by Stripe. Transaction ID, last four digits of card, and card brand received. Full card number not stored.
- Photos & banner content: uploaded images, text (names, dates, messages), theme and layout choices.
- Support communications: email, form, or chat content sent to the company.
Information collected automatically
- Usage data: pages viewed, builder steps completed, device type, browser, approximate location from IP.
- Cookies and local storage: first-party local storage saves in-progress banners.
Information embedded in photos
EXIF metadata (timestamps, GPS coordinates) is stripped from uploaded photos before rendering or long-term storage.
2. How We Use Your Information
- Create, render, and deliver banners (digital or printed).
- Process payments and prevent fraud via Stripe.
- Send order confirmations, shipping updates, and support replies.
- Improve the Service through analytics and bug fixes.
- Comply with legal obligations (tax, accounting, lawful requests).
We do not use your uploaded photos to train AI models. Marketing use requires express written consent.
Marketing email
Opt-in only at checkout or newsletter signup. Unsubscribe via email link or info@celebratebanner.com. Transactional emails sent regardless.
3. Who We Share Information With
| Sub-processor | Purpose | Data shared |
|---|---|---|
| Stripe, Inc. | Payment processing | Name, email, billing address, card data |
| Amazon Web Services (S3, CloudFront) | Photo/render storage and file delivery | Uploaded photos, banner renders, banner files |
| Fly.io | Website and backend hosting | IP address, request logs, order data |
| Neon (PostgreSQL) | Database — order and project records | Order and project data, email, shipping address |
| Upstash (Redis) | Cache and job queue | Order/render processing data |
| Postmark | Transactional email | Email address, order details |
| GitHub, Inc. | Source code repository | No customer data |
We do not sell your personal information. Data is never shared with multiple print partners for a single order.
4. Data Retention
- Uploaded photos & drafts: 90 days after last edit, then deleted. Final renders (post-order): 12 months.
- Order records: 7 years (tax/accounting compliance).
- Account & marketing email: until unsubscribe or deletion request.
- Server logs: 30 days.
5. Cookies and Tracking
- Strictly necessary: local storage for in-progress banners; session cookies for checkout.
- Analytics: first-party analytics only; no third-party tracking pixels or advertising cookies.
Clearing cookies/local storage discards unsaved banners.
6. Your Privacy Rights
All customers
Email info@celebratebanner.com to request:
- Copy of personal information held
- Correction of inaccuracies
- Deletion (subject to legal retention)
- Marketing email unsubscribe
Response within 30 days; identity verification may be required.
California residents (CCPA/CPRA)
Right to know, delete, correct, opt out of sale/sharing, and limit sensitive personal information use. No discrimination for exercising rights. Subject line: “California Privacy Request.”
Other US state residents
Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana residents have similar access, correct, delete, and opt-out rights.
EU/UK/Swiss residents
The Service is operated from the US and intended for US customers. We do not actively market to or solicit orders from the European Economic Area. Data transferred to the US under contract performance and legitimate interest basis.
7. Children
The Service is not directed to children under 13. No information is knowingly collected from minors. You must be 18+ to order, or a parent/guardian completes the purchase.
8. Security
- TLS encryption for data in transit
- Encrypted storage at rest with cloud providers
- Access controls limiting personal data visibility
- Stripe handles all card data
No system is 100% secure. Breaches are notified per applicable law.
9. International Users
CelebrateBanner is operated from the US and intended for US customers. Using the service constitutes consent to US data transfer and processing under US law.
10. Changes to This Policy
Updates are reflected in the “Last updated” date. Material changes are communicated via email or a 30-day page notice before taking effect.
11. Contact Us
CDN4 LLC, dba CelebrateBanner
211 Old Okeechobee Road, Bay 2 #1058
West Palm Beach, FL 33401
Email: info@celebratebanner.com
This policy is incorporated into the Terms of Service, Return & Refund Policy, and Shipping Policy.