Privacy policy

Information we collect

We collect the contact details, channel or server name, creative brief, selections, wording, uploaded references, rights confirmations, order history, and support messages needed to quote, produce, revise, and deliver your commission. Stripe processes payment details; Cosmic Canvas does not receive or store full card numbers.

How we use it

We use order information to provide the service, verify payment, prevent fraud, communicate status, generate and edit assets, provide support, maintain exclusivity records, and comply with legal and accounting obligations. We do not sell customer personal information.

Service providers

We use Cloudflare for hosting and security, Supabase for private order data and uploads, Stripe for payments, a transactional email provider for order messages, Google Drive for approved delivery, and local production tools for generation and editing. Each provider processes only the information needed for its role and operates under its own terms and privacy practices.

References and generated files

Uploaded references are stored privately and made available to the local production system through short-lived authorized links. They are not public gallery submissions. Final customer files are not resold. We may keep production copies for revision continuity, delivery recovery, fraud prevention, and exclusivity enforcement.

Browser data

The order builder may save an unfinished draft in your browser. The private admin dashboard uses a secure session cookie. We may retain limited operational logs needed for security, reliability, and error diagnosis. We do not use the order form to enroll customers in marketing email.

Retention and choices

We retain business and payment records as required for tax, accounting, fraud prevention, dispute handling, and legal compliance. Other order data is retained only as long as reasonably needed for production, support, and the purposes described here. You may request access, correction, or deletion by emailing us; some records may need to be retained where law or a dispute requires it.

Security and contact

We use private storage, restricted server credentials, hashed customer access tokens, HTTPS, and limited-access production workflows. No system can guarantee absolute security. Report a concern or submit a privacy request to CosmicCanvasCustoms@gmail.com.