Privacy

1Who is responsible

Fond & Fold is operated by Lingzi Kong, trading as Fond & Fold. Privacy questions and requests go to hello@fondandfold.com.

This Policy covers fondandfold.com, automatic-card generation, order delivery and support, mailing-list signups, and Commission inquiries. A payment provider's checkout is also covered by that provider's own privacy notice.

2Information handled

When you make an automatic card, Fond & Fold processes the photo you submit, the card and wording you choose, basic file details, an exact-file recovery identifier used to return the same stored result, the generated card, and limited service-status information. It also records the version of the photo-rights confirmation you accepted.

When you buy, Fond & Fold receives the email address used for delivery and, where different, the checkout contact email returned by Dodo Payments, together with order and transaction references, amount, currency, tax information, payment status, and any optional mailing or showcase choices. Fond & Fold does not receive or store your full payment-card number.

You may also leave an optional name to appear as the sender when someone opens your card. This is a display name, not a billing detail, and leaving it blank is fine.

You can add an optional personal note before payment. The confirmed note is stored with your order, shown inside the card on its delivery page, and available to the shop owner for delivery support. It is not sent to OpenAI, Dodo Payments, or mailing-list services.

When you contact the shop, request a Commission, or join the mailing list,Fond & Fold receives the information and files you choose to send. Mailing-list permission is optional and separate from payment and delivery.

When you use the site, the service processes technical and security information such as an anonymous session, IP address, general browser or device class, approximate country, request time, page or step, errors, and security events. Limited first-party storefront events are kept for up to 90 days to understand where the card flow works or fails. They do not include the uploaded photo, card wording, personal note, delivery email, or full generated file.

3How the information is used

Fond & Fold uses this information to:

• check the photo, make and show the requested card, and recover the same stored result;
• take and confirm payment, deliver the purchased file, and provide support;
• show your optional sender name and personal note when someone opens your shared card;
• apply reasonable-use and security controls and investigate failures or misuse;
• review a limited number of source-to-result examples during the source-photo retention period to identify recurring product-quality problems;
• send optional mailing-list updates only when permission was given; and
• keep records reasonably needed for orders, accounting, fraud, disputes, provider requirements, and law.

4Photos and OpenAI

The browser may check an image locally for basic validity and framing. When you submit it, Fond & Fold creates and stores a private working copy for the automatic-card process. A reduced version may be sent to OpenAI for a suitability check. If it is accepted, the photo and a private instruction are sent to OpenAI to generate the requested card. The returned result is stored privately and shown as a watermarked preview.

Fond & Fold does not identify people from their faces, match a person across photos, create face templates, or use customer photos or results for advertising or model training. An exact-file recovery identifier helps the exact same input return a stored result; it is not facial recognition and is not designed to identify or match a person.

OpenAI states that API data is not used to train its models by default. OpenAI processes API content under its API data controls and Privacy Policy. Its provider-side retention is separate from Fond & Fold's retention below.

Commission photos and references are handled through the private inquiry and working-email process rather than the automatic-card pipeline.

5Service providers and disclosures

Fond & Fold does not sell personal information or share it for cross-context behavioral advertising. Limited information is handled by service providers that operate the shop:

• Cloudflare provides website delivery, hosting, security, private file storage, and incoming-email routing.
• OpenAI receives the image and private instruction needed for suitability checks and card generation.
• Dodo Payments handles checkout, tax, payment, receipts, refunds, and disputes as merchant of record, and shares the order information needed for delivery and support.
• Resend sends delivery email and forwards Commission form submissions.
• Google email services store support, reply, and Commission messages in the private owner inbox.

Information may also be disclosed when reasonably necessary to comply with valid legal process, protect people or legal rights, or investigate fraud or security incidents.

Sharing a card link: anyone with the link can open and save the card and see the optional sender name and personal note. Only share it with people you want to have that access. If you send the link through another service, that service may fetch the page to show a preview and handle the link under its own privacy practices. Our preview image uses a public design detail, and its preview title and description contain no customer name, personal note, email address, or order reference. We ask search engines not to index your shared card; this does not restrict access by someone who has the link.

6Retention

• Automatic-card source photos: up to 30 days.
• Unpaid generated results, watermarked previews, and their recovery records:ordinarily up to 30 days. A final file tied to an unresolved payment may be kept until the payment provider confirms its status.
• Purchased final files: ordinarily up to 3 months. This is not a promised permanent re-download service.
• Personal notes: ordinarily up to 90 days after payment. An unpaid note is removed after its preview expires and payment is confirmed as failed or canceled. Notes may be kept longer while payment, a dispute, or a delivery issue remains unresolved.
• First-party storefront measurement events: up to 90 days.
• Ordinary service and security logs: normally up to 30 days, unless a specific security, abuse, fraud, or legal issue requires longer.
• Orders, optional sender names, payment, permission, and transaction records: for as long as reasonably needed for delivery, accounting, tax, fraud, disputes, provider requirements, and law.
• Commission and support messages and files: for as long as reasonably needed to assess or perform the work, answer the request, resolve a dispute, and meet legal obligations.
• Mailing-list permission and suppression records: while permission remains active and as needed to honor an unsubscribe or avoid sending again by mistake.

A provider may retain information under its own privacy policy. A particular record may be kept longer while a payment, delivery, chargeback, safety, security, dispute, or legal matter is unresolved.

7Cookies, browser storage, and tracking

The site uses an essential anonymous session cookie and limited browser storage for security, reasonable-use limits, and current preview or checkout continuity. They do not contain the uploaded photo or full generated file. Clearing site data may remove in-progress recovery information.

An unfinished personal note may be kept in the current tab's session storage so you can return to the same preview. The draft is cleared when the order confirms it. Browser session restore may preserve a draft; clearing site data removes it.

Fond & Fold uses limited first-party measurement described above, but does not use third-party advertising cookies or track people across unrelated websites for behavioral advertising. Because that cross-site tracking is not performed, changing a browser's Do Not Track signal does not change the practice.

8Your choices and privacy requests

Mailing-list and finished-card showcase choices are separate and off by default. Saying no does not affect generation, price, payment, or delivery. A showcase choice covers only the illustrated cover, not the personal note, source photo, or email address, and does not publish the card automatically or extend its ordinary retention period.

Depending on where you live, you may have rights to ask for access to, correction of, or deletion of personal information, or to withdraw an optional permission. Fond & Fold does not sell personal information or share it for cross-context behavioral advertising.

Email hello@fondandfold.com. Because there is no account, we may ask for limited information needed to find the relevant record and verify that it belongs to you.

9Children

The shop is not directed to children. A purchaser and photo submitter must be at least 18. An adult may submit a photo containing a child only if they are the child's parent or legal guardian, or have permission from that parent or guardian.

Content that sexualizes, exploits, endangers, or otherwise harms a child is prohibited. If you believe a child submitted information directly or a child's photo was submitted without proper authority, email hello@fondandfold.com.

10Security and processing locations

Fond & Fold uses reasonable technical and organizational safeguards and limits operational access. No online service is risk-free. If an incident affects personal information, Fond & Fold will investigate and provide notice where required.

Service providers may process information in the United States or other countries under their privacy notices and applicable safeguards.

11Changes and contact

This Policy may be updated as the service changes. The effective date at the top will change, and material changes will be posted as appropriate.

Questions or requests go to hello@fondandfold.com. See also the Terms.