Privacy policy

Curveprint is operated by Sedoux Style Boutique, LLC, a Florida limited liability company. It decides why and how your personal information is processed for the Curveprint service.

For anything in this policy, write to support@sedouxstyleboutique.shop or call +1 507 876 4786.

• Account information — your email address and a password hash. We need it to give you an account and to reach you about it. We never send you a password in an email.
• Artwork you upload — the file itself and the measurements taken from it. We need it to produce your reading. It is encrypted at rest, kept for 30 days and then deleted, and you can delete it sooner yourself.
• Subscription information — which plan you are on, when it renews, and your credit usage. Card details are handled by a PCI DSS compliant payment processor and never reach our servers; we hold only the last four digits and the card brand so you can recognise the card in your account.
• Support correspondence — what you write to us and what we write back, kept for two years so we have the history if you come back to the same issue.
• Basic technical logs — IP address, browser type, and error records, kept for 90 days. We need them to keep the service running and to investigate abuse and fraud.

We do not collect precise location, we do not collect biometric information, and we do not build advertising profiles.

Artwork you upload is never used to train a model, ours or anyone else’s. There is no setting that changes this and no exception for anonymised or aggregated use of the files themselves.

It is also never shown as an example. There is no gallery your work ends up in by default. If we ever want to show a particular file, we ask you about that specific file and you decide; saying no costs you nothing.

Copyright in your artwork stays entirely with you and we claim no right in it. See the terms.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in the California Consumer Privacy Act as amended by the CPRA and in comparable state statutes. We have not done so in the preceding twelve months.

There is nonetheless a standing Do Not Sell or Share My Personal Information page and a permanent link to it in the footer of every page, so the position is verifiable rather than merely asserted.

We honour the Global Privacy Control signal. If your browser or extension sends a GPC signal, we treat it as a valid request to opt out of any sale or sharing of your personal information, applied automatically and without asking you to confirm.

Because we do not sell or share personal information in the first place, there is nothing for the signal to switch off. It is respected regardless, and it is respected whether or not you have an account.

Depending on where you live, you can ask us to:

• tell you what personal information we hold about you and where it came from
• give you a copy in a portable format
• correct anything that is wrong
• delete it
• limit how we use sensitive personal information
• opt out of sale or sharing, and of profiling that produces legal or similarly significant effects

There are at least two ways to make any of these requests, and none of them requires you to create an account.

• Email support@sedouxstyleboutique.shop with what you want to do.
• Telephone +1 507 876 4786 and tell us. We will confirm in writing.
• If you do have an account, the same actions are available in your account settings.

We respond within 45 days. If a request is genuinely complex we may take up to a further 45 days and we will tell you why before the first period runs out. We may need to verify who you are before acting on a request, and we will ask for the least information that makes that possible.

We will never charge you a different price, give you a lower level of service, or treat you differently in any way because you exercised a privacy right.

You may use an authorised agent. We will ask for proof that you gave them permission.

If you think we have got something wrong, tell us first and we will try to put it right. You also have the right to complain to your state attorney general or, where one exists, your data protection authority.

Only the service providers we need to run the service, each under contract, each limited to what they need, and none permitted to use your information for their own purposes:

• hosting and storage, to run the application and hold encrypted files
• a PCI DSS compliant payment processor, to take subscription payments
• email delivery, to send account and service messages
• error monitoring, to find and fix faults

We also disclose information where the law requires it, and we will tell you unless we are prohibited from doing so. If the business is ever sold or merged, your information may transfer with it, subject to this policy.

The service is operated from the United States and information is processed there. If you are outside the United States, using the service involves your information being transferred to the United States. Where a transfer requires a legal mechanism such as the European Commission’s standard contractual clauses, we put one in place with the provider concerned.

• Uploaded artwork and derived views: 30 days, or until you delete them.
• Account information: while your account is open, then 30 days after you close it.
• Billing records: seven years, because tax law requires it.
• Support correspondence: two years.
• Technical logs: 90 days.

Everything travels over HTTPS. Uploaded artwork is encrypted at rest. Passwords are stored only as salted hashes. Access to production systems is restricted to the people who need it and is logged.

No system is perfectly secure. If a breach affects your personal information we will notify you and the relevant authorities as the law requires, without undue delay.

The service is not offered to anyone under 13 and we do not knowingly collect personal information from a child under 13. If you believe a child has given us personal information, write to support@sedouxstyleboutique.shop and we will delete it.

If we change this policy materially we will email account holders at least 30 days before the change takes effect and update the date at the top of this page. Previous versions are available on request.