Privacy Policy

1. DEFINITIONS

2. INFORMATION WE COLLECT

2.1 Vendor Information

We collect information that vendors voluntarily provide when creating or using a Gridget account. This may include contact details (such as email address), business identifiers (such as company name), transactional information (such as token purchases, template usage, and order activity), and communication preferences (such as marketing consent status).

When a vendor grants or withdraws marketing consent, we record the consent status, timestamp, IP address, and the version of the Terms of Service in effect at that time. This information is retained for compliance and audit purposes.

We may also collect limited, vendor-defined text or labels associated with artwork or print jobs. Gridget does not require or request that personally identifiable information (PII) about end customers be entered into these fields.

2.2 End-Customer Information

When an end customer interacts with Gridget—for example, by uploading an image through a QR code or unique link—Gridget automatically processes only what is needed to fulfill the vendor's request.

This typically includes the image file, technical metadata (such as file size, format, device type, IP address, and timestamp), and any optional descriptive text the vendor provides.

Beyond the optional text-message opt-in, connected commerce platform orders, and feedback survey described below, Gridget does not require names, contact information, or other direct identifiers from end customers, and any vendor-entered free-text labels are controlled solely by the vendor. Vendors are responsible for ensuring that such text complies with applicable privacy laws.

Text-message opt-in. If the vendor has enabled order notifications, an end customer may optionally provide a mobile phone number to receive a text message when their order is ready for pickup. When a customer opts in, we record the phone number, the date and time of consent, and the IP address from which consent was given. Providing a phone number is never required to use Gridget, and the number is used solely to deliver order-status notifications for that specific order — never for marketing.

Connected commerce platforms (Shopify). When a vendor connects a commerce platform such as Shopify to their Gridget account, Gridget receives order information from that platform when a customer makes a purchase. This may include the buyer's name and email address as recorded on the order, which Gridget stores as an order reference so the vendor can match the Gridget order to the platform order. This information originates from the customer's purchase on the vendor's store and is governed by the vendor's and the platform's own privacy terms; Gridget uses it only to label and fulfill the order; when the order is later deleted from Gridget, the name or email is replaced with the platform's order number (see Section 6).

Event photo booth. Vendors may operate a Gridget-powered photo booth at their events. Images captured at a booth are taken by the vendor's booth device, may depict event attendees, and are stored and processed by Gridget on the vendor's behalf (including optional image adjustment, overlays, and on-site printing). The vendor, as the event operator, is responsible for providing any notice to and obtaining any consent from the individuals photographed. Booth and event images are deleted on the schedule described in Section 6.

Feedback survey. After completing an upload, customers may optionally rate their experience and leave a comment. If submitted, we store the rating, the comment text, and basic device information (browser and device type). Gridget uses this feedback for its own product-improvement purposes.

2.3 General Data Handling

All information is processed solely for the purposes of account management, service operation, and product fulfillment. We apply technical and organizational measures to protect data at rest and in transit and to minimize the amount of personal information stored.

We may aggregate or anonymize data for analytics or service improvement, but we do not sell or share personal information with third parties for marketing.

2.4 Access to Uploaded Content

The Widget Bot and its authorized personnel may access uploaded photos, orders, and related activity for legitimate operational purposes, including quality assurance, order verification, technical troubleshooting, and abuse prevention. Widget Bot does not manually review all content.

3. PURPOSES OF PROCESSING

We process collected data to:

• Provide and maintain the Gridget platform;
• Facilitate token transactions and image processing;
• Communicate with vendors about account and service matters;
• Send order-status text messages to end customers who have expressly opted in;
• Send marketing communications to vendors who have opted in (product updates, tips, and promotions);
• Monitor for misuse, illegal uploads, or technical errors;
• Comply with legal obligations.

We do not sell or rent personal information.

4. DATA CONTROLLER AND PROCESSOR ROLES

For compliance purposes:

• The Widget Bot LLC acts as a data controller with respect to vendor account data.
• Vendors act as data controllers with respect to any customer uploads and vendor-supplied text or metadata submitted through links or QR codes they generate, images captured through the vendor's event photo booth, and order information received from a commerce platform the vendor has connected. Although customers perform the image upload (or are photographed at the vendor's booth), the vendor determines the purpose, means, and associated text or branding added during processing. Widget Bot acts solely as a data processor, handling such data on behalf of the vendor and in accordance with their instructions.
• The Widget Bot LLC acts as a data controller for the optional customer feedback survey described in Section 2.2, which it processes for its own product-improvement purposes.

5. DATA STORAGE AND SECURITY

All personal data and uploaded content are securely stored in the United States (Virginia region) using Vercel, Cloudflare, and NEON for hosting, storage, and secure global content delivery. We also use Axiom for application telemetry and error monitoring (which may receive usage events directly from your browser while using the Service) and Resend for delivering email, each acting as a service provider on our behalf.

Data is encrypted in transit and at rest, and access is restricted to authorized personnel under strict confidentiality agreements.

Text messages are delivered through our messaging infrastructure and our telecommunications carrier partner, Flowroute, Inc. (United States), acting as a service provider on our behalf. Carrier partners receive only the information necessary to deliver the message (the recipient phone number and message content) and are not permitted to use it for any other purpose.

6. DATA RETENTION

• Vendor data is retained while the vendor account is active or as required by law.
• End-customer uploads (order flow) are stored temporarily for processing and deleted automatically within 30 days after printing or a defined retention period.
• Event and photo booth images (including ZIP archives of event photos) are retained while the vendor's event is active and deleted automatically 14 days after the event ends.
• Commerce platform order references (such as the buyer name or email received from Shopify) are kept while the order is active or archived; when the order is deleted, the buyer name or email is automatically replaced with the platform's order number, which is retained for reconciliation, tax, and audit purposes.
• Customer feedback (rating, comment, device information) is retained for product-improvement analysis.
• Transaction data may be retained longer for tax and audit compliance.
• Marketing consent records (including consent status, timestamp, IP address, and Terms version) are retained for the duration of the vendor account and for a reasonable period thereafter for compliance and audit purposes.
• End-customer phone numbers provided for text notifications are deleted automatically when the associated order is cancelled, or shortly after the vendor completes and archives the order (typically within 7 days of archiving). Consent records are deleted together with the phone number.

7. COOKIES AND TRACKING

Gridget uses functional cookies and application analytics (Vercel and Cloudflare metrics, and Axiom telemetry, which records product-usage events such as page views, upload progress, and errors) to ensure site reliability, security, and performance. We do not use cookies or tracking technologies for advertising or behavioral profiling.

8. MARKETING COMMUNICATIONS

Vendors may opt in to receive marketing communications from Gridget, including product updates, tips, and promotional emails. Marketing consent is always optional, never pre-selected, and separate from acceptance of the Terms of Service.

When you grant or withdraw marketing consent, we record:

• Your consent status (opted in or opted out);
• The date and time of the action;
• Your IP address at the time of the action; and
• The version of the Terms of Service in effect.

You may withdraw your marketing consent at any time by:

• Toggling the email preferences setting in your vendor Profile;
• Clicking the "unsubscribe" link in any marketing email; or
• Emailing privacy@thewidgetbot.com with the subject line "Unsubscribe."

Withdrawal of consent does not affect transactional communications necessary for account operation (such as sign-in links and purchase confirmations).

Marketing emails may include standard delivery measurement (whether an email was opened and which links were clicked), which we use to gauge the relevance of what we send. This measurement applies only to marketing emails to vendors — never to transactional emails or customer-facing communications.

9. TEXT MESSAGE (SMS) NOTIFICATIONS TO END CUSTOMERS

Where a vendor has enabled the feature, end customers may opt in to receive a text message when their order is ready for pickup. These messages are transactional: they relate solely to the customer's own order and are never used for marketing or promotional purposes.

• Opt-in is always express and optional — the customer enters their own phone number and is shown the purpose of the messages before submitting;
• We record the phone number, consent timestamp, and IP address as evidence of consent;
• Message and data rates may apply, as charged by the customer's carrier;
• Customers may opt out at any time by replying STOP to any message. Once a customer opts out, no further messages are sent to that number unless the customer re-subscribes (for example, by replying START) or provides fresh consent on a new order;
• Phone numbers are displayed to vendors and in our systems only in masked form (last four digits) and are deleted on the schedule described in Section 6.

10. INTERNATIONAL DATA TRANSFERS

Transfers of personal data from the EEA, UK, or Australia to the U.S. are conducted pursuant to Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards.

11. USER RIGHTS AND REQUESTS

Users — including end customers who provided a phone number for text notifications — may request access, correction, or deletion of their personal data by contacting privacy@thewidgetbot.com. We will verify requester identity and respond within applicable legal timeframes.

12. U.S. STATE PRIVACY COMPLIANCE

We comply with applicable U.S. state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA). We do not sell personal information as defined under those laws.

13. CHILDREN'S PRIVACY

Gridget is not directed to children under 13. We do not knowingly collect personal data from minors. If discovered, such data will be deleted promptly.

14. DATA BREACH NOTIFICATION

In the event of a data breach involving personal information, we will notify affected users and relevant supervisory authorities as required by law.

15. CONTACT INFORMATION

16. CHANGES TO THIS POLICY

We may update this Policy periodically. Continued use of Gridget after updates constitutes acceptance of the revised Policy.