Privacy Policy

1. Information we collect

We collect the following categories of personal data:

• Account information. When you sign up we process your email address and basic profile details. Authentication is handled by our identity provider, Clerk, which manages your sign-in credentials on our behalf.
• Photos and content you upload. To create a topper we process the photographs, names, and any other details you provide. These are used to generate your previews and produce your order.
• Order and delivery details. We process the items you order, your shipping address, and order history needed to fulfil and support your purchase.
• Payment information. Payments are processed by Stripe. Stripe collects and processes your card details directly; we receive only limited confirmation data (such as payment status and the last digits or card brand) and do not store full card numbers on our systems.
• Usage and technical data. We collect aggregated, largely product-analytics data about how the studio and site are used (for example, which steps of the design flow are completed), together with technical information such as your device type, browser, and IP address, to operate, secure, and improve the Service.

2. How we use your information

• To generate your topper previews and produce, ship, and support your orders.
• To create and manage your account and authenticate your sign-in.
• To take payment and prevent fraudulent or abusive transactions.
• To communicate with you about your orders and respond to support requests.
• To operate, secure, debug, measure, and improve the Service.
• To comply with legal obligations and enforce our Terms of Service.

3. How your photos are used

The photos you upload are processed to generate your cake-topper designs. This includes automated image processing and AI-based generation carried out through our compute provider, Modal, to turn your photo into stylised topper previews and the final production artwork. We use your photos only to provide the Service to you; we do not sell them or use them to train models for unrelated purposes or to advertise without your separate consent.

4. Service providers we share data with

We share personal data with trusted third-party providers who process it on our behalf, under contract and only as needed to run the Service:

• Stripe— payment processing.
• Clerk— account creation and authentication.
• Cloudflare— hosting, content delivery, storage, and security/abuse protection.
• Modal— the compute platform that runs the image processing and AI generation of your toppers.

We do not sell your personal data. We may also disclose data where required by law or to protect our rights, and in connection with a corporate transaction such as a merger or acquisition.

5. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your session, secure the Service, and measure usage so we can improve it. You can control cookies through your browser settings, though some features may not work without them.

6. Data retention

We keep your personal data for as long as your account is active or as needed to provide the Service, fulfil your orders, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. Uploaded photos and generated artwork are retained while they are needed to provide and support your order; we delete or anonymise data when it is no longer required, subject to applicable retention requirements.

7. Data security and storage

We use technical and organisational measures designed to protect your personal data, including access controls and private, restricted storage for the photos you upload. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

Conjure and our providers may process personal data in countries other than the one where you live. Where personal data is transferred internationally, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) as required by applicable law. Customer-uploaded photos are stored in a restricted, private storage location.

9. Your rights

Depending on where you live, you may have rights over your personal data. If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access, correct, delete, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data-protection authority. To exercise any of these rights, contact us using the details below; we will respond as required by applicable law.

10. Children’s privacy

The Service is intended for adults and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you of material changes.

12. Contact us

For privacy questions or to exercise your rights, email us at [email protected].