Privacy Policy

Effective date: 6/26/2026

Amaze Gifts helps you turn photos into custom AI-generated artwork and printed gifts. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices you have.

When we say “Amaze Gifts,” “we,” “us,” or “our,” we mean Amaze Gifts Inc. doing business as Amaze Gifts, located at 1350 Yarmouth Ave #2201, Boulder, CO 80304.

When we say “Services,” we mean our website, product customization tools, AI design features, checkout flow, emails, and related services.

1. Information we collect

Information you provide to us

We collect information you choose to give us, including:

Photos you upload, such as photos of people, pets, or other subjects you want to turn into artwork.
Design inputs, such as templates, styles, captions, text you add to a design, prompts, and edit instructions.
Account information, such as your email address and login details if you create an account.
Order information, such as products selected, quantities, gift options, shipping details, and order history.
Communications, such as messages you send to customer support or replies to our emails.

Photos and generated designs

Because Amaze Gifts is built around custom photo gifts, photos and generated designs are an important part of how the Service works.

When you upload a photo, we use it to create AI-generated artwork, preview that artwork on products, save your design history if applicable, and prepare print files if you place an order.

Generated designs may include the uploaded photo transformed into artwork, design settings, captions, placement information, edit history, preview images, and print-ready files.

We do not use facial recognition, create faceprints, scan facial geometry, or otherwise collect or generate “biometric identifiers” as defined under laws such as the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, or the Washington biometric privacy law.

We do not use your photos to identify, verify, or match individuals.

Photos of other people

If you upload a photo that includes someone other than yourself, you are responsible for having that person’s permission to use their image with Amaze Gifts, including to create AI-generated artwork from it, save the resulting design, share it, and print it on a physical product.

Payment information

Payments are processed by Stripe. We do not store your full credit card number on our servers. Stripe may collect and process payment details, billing information, fraud-prevention information, and transaction records according to its own privacy practices.

Fulfillment information

If you place an order, we collect and share the information needed to make and ship your gift, such as the final print file, product details, quantity, shipping recipient name, shipping address, and related order information.

Information collected automatically

When you use Amaze Gifts, we may collect or process:

Device and browser information.
IP address information processed by infrastructure and service providers.
Server/runtime log data, such as requests, errors, timestamps, and technical diagnostics.
Cookie and session information.
Cart, product, template, and design activity.
First-party analytics events, such as design generation, cart activity, and purchases.
Information needed to prevent fraud, abuse, or misuse of the Service.

Amaze Gifts does not intentionally store raw IP addresses in its own application database. However, IP addresses may be processed by our infrastructure and service providers, including hosting, database, authentication, payment, AI, and fulfillment providers, for hosting, security, fraud prevention, authentication, payments, AI processing, fulfillment, debugging, compliance, and related operational purposes.

Cookies and local browser storage

We use cookies and browser storage to make Amaze Gifts work properly.

Our main first-party guest cookie is used to associate guest uploads, generated designs, carts, orders, and credit activity with the same anonymous browser. This cookie is designed to last for about 400 days, or roughly 13 months, unless you clear your cookies sooner.

Signed-in users may also have authentication cookies or session storage managed by our authentication provider.

We also use browser storage, including:

Session storage, for uploaded photo preview data, subject IDs, upload timestamps, upload expiration times, generated-design tray state, pending download intent, and Design Library handoff or preview cache. Session storage generally lasts until the tab or browser session ends, and some entries are removed sooner when the related upload expires.
Local storage, for selected templates per product, returning-user flags, and cart cache. These entries remain until cleared by you or your browser, or until overwritten or removed by the app.
IndexedDB, for local generated-design paint/cache data. Server-side storage remains authoritative for your Design Library, cart, and order flows. IndexedDB entries remain until cleared by you or your browser, or until pruned, overwritten, or removed by the app.

Clearing cookies or browser storage may remove your cart, local previews, in-progress design trays, guest session continuity, or other local app state.

2. How we use information

We use information to:

Provide the Service.
Upload and temporarily store photos.
Generate, edit, preview, save, share, and print designs.
Show your designs on product mockups and 3D previews.
Save your Design Library if you create an account.
Process orders and payments.
Fulfill and ship products.
Send order confirmations, receipts, shipping updates, and support messages.
Detect, prevent, and troubleshoot fraud, abuse, technical issues, and security problems.
Understand product usage and improve the Service.
Maintain business, tax, accounting, legal, and compliance records.

We do not use your uploaded photos or generated designs to sell unrelated products to you.

3. How AI generation works

To create or edit a design, Amaze Gifts sends the information needed for that request to an AI service provider. This may include:

The photo you uploaded.
The current generated image, if you are editing a design.
The template, style, caption, prompt, or edit instruction you selected or entered.
Technical configuration needed to generate the image.

The AI provider returns generated artwork, which we store so you can preview, edit, purchase, save, or share it.

How your photos and designs are handled by our AI provider

We use Google’s Gemini API on a paid, business-tier account to generate and edit your designs. Under Google’s paid API terms, Google does not use your photos, prompts, or generated designs to train or improve its AI models.

Google acts as our data processor, meaning it processes this information only to fulfill your generation request on our behalf and may not use it for its own purposes. Google retains request data for a limited period, currently up to 55 days, solely to detect and prevent misuse and to meet legal requirements.

We do not use your uploaded photos or generated designs to train any AI models, our own or anyone else’s.

Please do not upload photos or enter prompts that contain highly sensitive information unless you are comfortable using them to create a custom gift.

4. Photo, design, and data retention

We try to keep information only as long as needed for the purpose it was collected, unless we need to keep it longer for business, legal, tax, accounting, security, fraud-prevention, dispute-resolution, or compliance reasons.

Uploaded subject photos

Uploaded subject photos are generally temporary. They are stored in private storage and usually expire after about 24 hours. After expiration, you may need to re-upload the photo to generate more designs from it.

If you upload a new subject photo for the same product, we generally replace the prior active subject photo for that product and delete the old one when it is no longer needed.

Generated designs for guests

If you use Amaze Gifts without signing in, generated designs may be stored for a limited time so you can keep working, add items to cart, or return to your recent designs. Guest designs generally expire after a rolling 30 days, unless they are shared, ordered, migrated to an account, or otherwise retained as described in this Policy.

Generated designs for signed-in users

If you create an account, generated designs saved to your Design Library may be retained until you delete them or request deletion of your account data, unless we need to retain certain records for legal, tax, payment, fraud-prevention, dispute, fulfillment, or compliance reasons.

Shared designs

If you create a share link, anyone with that link may be able to view the shared design payload, including the generated image, product choices, size/color when applicable, placement, scene, captions, and related design settings.

Shared designs may include images of people other than you if you uploaded photos containing other people. Please do not create or send a share link unless you are comfortable with anyone who has the link being able to view the shared design.

Shared links are currently intended to keep working unless the design or underlying data is deleted or removed. Do not share a design link with anyone you do not want to be able to view that design.

Orders and print files

If you place an order, we may retain order records, final print files, cart snapshots, shipping details, fulfillment artifacts, transaction records, and support records as needed to produce the item, handle returns or support, prevent fraud, maintain business records, and comply with legal, tax, accounting, and payment obligations.

Deleting a design from your Design Library may not delete order records or fulfillment files associated with a completed or pending purchase.

Server, runtime, and deployment logs

Amaze Gifts is hosted on Vercel. We do not intentionally store general raw server request logs in our own application database.

Application and runtime logs are produced through normal server logging in Vercel Functions. These logs are retained according to our hosting provider’s settings, which may vary depending on the hosting plan, Observability settings, provider defaults, and applicable law. Typical retention may range from about 1 hour to 30 days.

Build and deployment logs may be retained longer by the hosting provider, potentially for the life of the deployment, unless deleted through that provider’s tools or according to that provider’s policies.

IP address data

Amaze Gifts does not intentionally store raw IP addresses in its own application database. However, IP addresses may be processed by infrastructure and service providers, including Vercel, Supabase, Stripe, Google OAuth, Google Gemini, and Printful, for hosting, security, fraud prevention, authentication, payments, AI processing, fulfillment, debugging, compliance, and related operational purposes.

Retention of provider logs and IP address records depends on each provider’s policies, account settings, and applicable law.

Cookies and browser storage retention

Our main first-party guest cookie is designed to last for about 400 days, or roughly 13 months, unless you clear cookies sooner.

Signed-in session cookies and authentication-related storage are managed by our authentication provider and browser session behavior.

Session storage generally lasts until the tab or browser session ends, although some entries may be removed sooner when the related upload expires or the app no longer needs them.

Local storage and IndexedDB entries generally remain until cleared by you or your browser, or until overwritten, pruned, or removed by the app.

First-party analytics records

Amaze Gifts stores first-party analytics events to understand product usage and operate the business. These events may include event type, such as design generated, cart added, or purchased; anonymous owner scope; optional user ID; product ID; metadata; and timestamp.

Analytics records are retained until they are no longer needed for business, security, analytics, legal, tax, accounting, or compliance purposes, or until deleted in response to a valid request where deletion is required.

5. How we share information

We share information only as needed to provide, operate, protect, and improve Amaze Gifts.

Service providers

We share information with vendors that help us run the Service, including:

Vercel, for hosting, serverless functions, deployment, logging, and infrastructure.
Supabase, for database, authentication, private storage, and account-related functionality.
Google Gemini, for AI image generation and editing.
Stripe, for payments, checkout, tax-related payment records, and fraud prevention.
Printful, for print-on-demand production and order fulfillment.
Email, analytics, logging, security, and support providers, to operate, secure, troubleshoot, and support the Service.

These providers process information on our behalf or as needed to provide their services.

Fulfillment partners

When you order a product, we send the final print file and order information needed to make and ship the item. This may include artwork derived from your uploaded photo, captions, product selections, shipping recipient name, shipping address, and related order details.

Sharing features

When you use a share link, the people you send it to can access the shared design. Anyone with the link may be able to view it.

Legal and safety reasons

We may disclose information if we believe it is necessary to:

Comply with law, legal process, or government requests.
Enforce our terms or policies.
Protect the rights, safety, privacy, or property of Amaze Gifts, our users, or others.
Detect, investigate, or prevent fraud, security issues, abuse, or technical problems.

Business transfers

If Amaze Gifts is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, user information may be transferred as part of that transaction.

6. Security

We use reasonable technical and organizational measures to protect information, including private storage for uploaded photos and generated designs, temporary signed URLs for browser display, and access controls where appropriate.

No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed by a breach of our safeguards.

7. Your choices

Access, update, or delete account information

If you have an account, you may be able to access or update certain information through your account settings. You may also contact us to request access, correction, or deletion.

Delete designs

You may be able to delete generated designs from your Design Library. Deleting a design generally removes it from your library and attempts to delete associated image files and previews. Some related records may remain if needed for orders, fulfillment, security, legal, tax, accounting, compliance, or dispute-resolution purposes.

Delete uploaded photos

Uploaded subject photos are generally temporary and expire automatically. You can also replace a subject photo by uploading a new one for the same product.

Cookies and browser storage

You can control cookies through your browser settings. You can also clear browser storage, but doing so may remove your cart, local previews, in-progress design trays, guest session continuity, or other local app state.

Marketing emails

If we send marketing emails, you can unsubscribe using the link in the email. We may still send transactional or service-related messages, such as order confirmations, shipping updates, password emails, or important account notices.

8. State privacy rights

Depending on where you live, you may have privacy rights under state privacy laws. These may include the right to:

Know what personal information we collect, use, disclose, or share.
Access personal information we have about you.
Correct inaccurate personal information.
Delete personal information.
Receive a copy of certain information in a portable format.
Opt out of certain uses or disclosures, if applicable.
Not be discriminated against for exercising privacy rights.

Amaze Gifts does not sell personal information in the traditional sense. If we later use advertising or analytics tools that are considered “selling” or “sharing” personal information under applicable privacy laws, we will update this Privacy Policy and provide any required opt-out controls.

To exercise privacy rights, contact us at: support@amaze.gifts

We may need to verify your request before we can respond.

9. Children’s privacy

Amaze Gifts is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us and we will take appropriate steps to delete it.

If you upload a photo of a child, you are responsible for making sure you have the right to use that photo with Amaze Gifts.

10. International users

Amaze Gifts is operated from the United States. If you access the Service from outside the United States, your information may be processed in the United States and other countries where we or our service providers operate.

If we later target users in regions with additional privacy requirements, such as the European Economic Area, United Kingdom, or Switzerland, we may update this Privacy Policy and provide additional notices or rights required by applicable law.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and may provide additional notice, such as through the website or by email.

12. Contact us

Questions, requests, or concerns about privacy?

Mailing address:

Amaze Gifts 1350 Yarmouth Ave #2201 Boulder, CO 80304