Privacy Policy

This Privacy Policy explains how Together Pieces ("Together Pieces", "we", "us" or "our") collects, uses and shares your information when you use togetherpieces.com and related services (the "Services").

We handle family photos and personal information, and we take that responsibility seriously. This page explains, in plain language, what we do with your information and what choices you have.

For any privacy question, email us at hello@togetherpieces.com. A real person answers.

If you do not agree with this Privacy Policy, please do not use the Services. By using the Services, you agree to the practices described here.

Information you provide

• Photos: the images you upload so we can create your artwork previews and your printed puzzle.
• Contact information: your name and email address, given during checkout.
• Shipping information: the delivery address used to send your order.
• Payment information: payments are processed by Stripe. We never receive or store your full card number. Stripe gives us a transaction reference and limited details, such as the last four digits, for our order records.
• Communications: any message you send to our support team.

Information collected automatically

• Device information: browser type, operating system, device type and screen size.
• Usage data: pages visited, steps completed in the puzzle creator and other interactions with the Services.
• Network information: IP address, approximate location (country and region) and referring website.
• Advertising identifiers: click identifiers passed to our site by advertising platforms, used to measure which ads lead to orders.
• Cookies and similar technologies: small files and browser storage used to keep your puzzle in progress, remember your cart and measure performance.

• Providing the Services: turning your photo into artwork previews, saving your work in progress, and producing and delivering your puzzle.
• Artwork generation: your uploaded photo is sent to our artwork generation provider so the styled previews can be created. Images sent through that provider's business interface are not used to train its models.
• Order fulfilment: sharing your chosen artwork and shipping details with our print and fulfilment partners so your puzzle can be made and posted.
• Customer support: answering your questions, fixing problems and handling remakes or refunds.
• Analytics and improvement: understanding how the Services are used so we can make them clearer and faster.
• Marketing measurement: with your consent where required, measuring how our advertising performs.
• Fraud prevention and security: rate limiting, abuse detection and protecting our systems and customers.
• Legal compliance: meeting our legal obligations, enforcing our Terms of Service and protecting our rights.

• Contract performance: processing needed to fulfil your order and provide the Services you asked for, including photo processing, payment and shipping.
• Consent: where you have given consent, such as for marketing emails and non-essential cookies.
• Legitimate interests: improving the Services, preventing fraud and keeping our systems secure, where those interests are not overridden by your rights.
• Legal obligation: where processing is required by applicable law, including tax and accounting rules.

We do not sell your personal information. We share it only in these situations:

• Artwork generation provider: your photo is sent for the sole purpose of generating your style previews. Only the image data needed for processing is shared.
• Print and fulfilment partners: our US print partner receives your chosen artwork and your shipping address so it can print, box and post your puzzle. Parcels arrive unbranded by the printer and are sent on our behalf.
• Payment processor: Stripe handles your payment details directly under its own privacy policy.
• Hosting and infrastructure providers: secure cloud services that store your photos, order records and website data on our behalf.
• Analytics and measurement providers: services that help us understand site usage and advertising performance. Data shared for advertising measurement is limited and, where supported, hashed.
• Legal requirements: we may disclose information where required by law, regulation, legal process or a valid government request.
• Business transfers: if we are involved in a merger, acquisition or sale of assets, your information may transfer as part of that transaction.

We use strictly necessary storage to keep your puzzle in progress and your cart available if you return within a couple of days, so you do not have to upload your photo again. We also use analytics and advertising measurement technologies to understand how the site is used and which ads lead to orders.

You can clear this data at any time through your browser settings. Blocking strictly necessary storage may mean your saved puzzle and cart are lost.

• Photos and generated artwork: kept for 180 days after your order is fulfilled, or after your last activity if no order was placed, so we can handle reprints and support requests. After that they are permanently deleted.
• In-progress puzzles: work saved in your browser is kept for a short period, typically a few days, then cleared.
• Order records: order details, excluding photos, are kept as long as needed for legal, tax and accounting obligations, typically up to 7 years.
• Contact information: your name and email are kept until you ask us to delete them or they are no longer needed for the purposes in this policy.
• Analytics data: aggregated analytics may be kept indefinitely and does not identify you personally.

You can ask us to delete your photos and personal information at any time by emailing hello@togetherpieces.com.

Together Pieces operates from the United States, and our print partner is based in the United States. Your information may be transferred to and processed in the United States and in other countries where our service providers operate. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for those transfers.

We use reasonable technical and organisational measures to protect your information: encryption in transit (HTTPS), private access-controlled storage for photos, time-limited links for images shared with our print partner, row level access rules on our database, rate limiting on uploads and generation, and restricted internal access.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any relevant authority as required by law.

The Services are intended for adults. You must be 18 or older to place an order, and we do not knowingly collect personal information directly from children. Photos of children are commonly part of family gifts, and you may upload them only if you are the parent or legal guardian, or have permission from the parent or legal guardian. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

Depending on where you live, you may have the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to fix anything inaccurate.
• Deletion: ask us to delete your personal information, including uploaded photos.
• Portability: request a machine-readable copy of your personal information.
• Restriction: ask us to limit how we use your information.
• Withdraw consent: where processing is based on consent, withdraw it at any time. This does not affect processing carried out before withdrawal.
• Object: object to processing based on our legitimate interests.
• Opt out of marketing: use the unsubscribe link in any marketing email, or email us.

To exercise any of these rights, email hello@togetherpieces.com. We will respond within 30 days and will not discriminate against you for making a request.

California residents

If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell your personal information. To opt out of sharing for targeted advertising, enable Global Privacy Control in your browser or email us.

EEA, UK and Switzerland

If you are located in the European Economic Area, the United Kingdom or Switzerland, you have the rights described above and may lodge a complaint with your local data protection authority if you believe your rights have been infringed.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date. Please review it periodically.

Questions about this policy or our data practices? Email hello@togetherpieces.com and we will get back to you.

Together Pieces, togetherpieces.com, United States.