Privacy Policy

This Privacy Policy explains what information Arkwork Cards (“Arkwork,” “we,” “us”) collects when you use our card-generation service, how we use it, and how long we keep it.

What we collect

• Card content you provide— the recipient's name and role, the appreciation text you write, and an optional photo you upload.
• Email address — only if you choose to save a preview link or opt into occasional updates; never required to generate a card.
• Payment information — handled entirely by Stripe when you purchase an HD unlock. We never see or store your card number.
• Technical information — your IP address and a bot-verification token (via Cloudflare Turnstile), used only to prevent abuse of the free tier.

How we use it

The recipient's name and role, your appreciation text, and your photo (if you upload one) are sent to OpenAI to generate your card image and suggested caption — that's the only reason any of it leaves Arkwork's own systems, aside from the providers listed below. We also process your payment if you unlock the HD version (via Stripe), send transactional emails you request via Resend (like a saved preview link), and protect the service from automated abuse (via Cloudflare). We do not sell your information, and we do not use it to train AI models beyond what's needed to generate your own card in the moment.

How uploaded content is processed

Before a photo is used for generation, we strip its embedded metadata — including GPS/location data that many phone cameras attach automatically — and normalize its orientation. The version sent to OpenAI, and any version we store temporarily, never carries that metadata. Your photo and text are then run through an automated safety check before generation — see our Safety & Moderation page for what that involves.

How long we keep it

• Uploaded photos and generated card images (both preview and HD) are automatically and permanently deleted approximately 6 hours after generation.
• If you choose to share a card publicly ("Celebrate Publicly"), that public copy — the image, recipient name, and appreciation text — is kept for approximately 14 days before automatic deletion. If you never make a card public, nothing beyond the temporary 6-hour copy is ever created — staying private is the default, not a separate choice you have to make.
• If you provide an email address, we keep it until you unsubscribe or ask us to delete it.
• Payment records are retained by Stripe per their own retention policy, as required for financial recordkeeping.

Who we share it with

We use a small number of service providers to operate Arkwork, each only for the purpose described:

• OpenAI, to generate your card image and suggested caption from the information you submit.
• Stripe, to process payments securely.
• Resend, to send transactional emails and, if you opt in, occasional updates.
• Cloudflare, to verify that generation requests come from real people, not bots.

We do not share your information with data brokers or advertisers, and we never scrape or pull information about the recipient from anywhere else — everything comes from what you type in.

Public sharing

Choosing “Celebrate Publicly” uploads your preview-quality card image to a public page that anyone with the link can view — it is not indexed for search or listed anywhere on Arkwork, but it is not access-restricted either. That page shows the recipient's name, your appreciation text, and the suggested caption. It never shows your own name, email, or any other identifying information about you, the sender. The full-resolution HD image is never made public, regardless of this choice.

Reporting and removal

If you come across a publicly shared card you believe violates our Community Guidelines, or you shared a card yourself and want it taken down before its automatic deletion date, email privacy@arkwork.co with the link. Reports and removal requests are reviewed by a person, not an automated system — see our Safety & Moderation page for how that process works today.

Your choices

You can decline to provide an email address and decline to upload a photo. Cards are private by default — nothing is ever made public unless you actively choose “Celebrate Publicly.”

Your responsibilities

You're responsible for having the right to use any photo you upload, and for the accuracy of the information you submit about the recipient — we process what you give us in good faith, not independently verified. See our Terms of Service and Community Guidelines for the complete picture.

Children's privacy

Arkwork is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page.

Contact

Questions about this policy, or want to exercise a data choice? Reach us at privacy@arkwork.co.