Privacy Policy

1. What this policy covers

This policy explains how Desi Family Tree handles information when you browse the site, build or share a family tree, create a print, contact us, or place an order.

2. Information you provide

• Account details, such as your email address and authentication provider.
• Family tree information, including names, relationships, gender, dates, locations, notes, stories, contact details, and photos.
• Collaboration information, including invitation addresses, member roles, linked trees, and share-link settings.
• Wedding, calendar, caption, and merchandise designs you create.
• Order and delivery information. Stripe handles payment-card data; we do not store full card numbers.
• Feedback, support messages, and order photographs you send.

3. Guest trees

If you use the builder without signing in, guest-tree information is stored in your browser. It is not saved to your cloud account unless you choose to sign up and migrate it. Clearing browser data can permanently remove a guest tree.

4. How information is used

• Provide, secure, and troubleshoot the service.
• Generate family relationships, layouts, exports, and prints.
• Save trees and apply the collaboration choices you make.
• Process payments, fulfill orders, and send order updates.
• Respond to feedback, support, disputes, and safety concerns.
• Measure reliability and improve the product when you allow optional analytics.

5. Sharing and public links

Trees are not public by default. People you invite can access a tree according to their assigned role. If you create a read-only share link, anyone who receives the active link can view the information shown on that shared page. Share links use long random tokens and can be revoked, but recipients can still copy or capture information they saw before revocation.

6. Printing and public design files

When you prepare or order a personalized product, the rendered artwork is stored at a hard-to-guess public file URL so the print provider can retrieve it. Do not include information in print artwork that you are not comfortable sending to a fulfillment provider. Checkout creates an order-specific copy so later edits do not change paid artwork.

7. Service providers

We use providers only for the functions they supply:

• Supabase for authentication, database, and file storage.
• Vercel for hosting, security, web analytics, and performance.
• Stripe for checkout, payment, refunds, and fraud controls.
• Printful for product production, fulfillment, and shipping.
• Resend for transactional and support email.
• Inngest for reliable background jobs and order workflows.
• PostHog and Google Analytics for optional product analytics after consent. Sensitive inputs are masked and family-tree canvases are blocked from session replay.
• Google when you choose Google sign-in.

We do not sell personal information. Providers may process data in other countries under their own security and legal commitments.

8. Cookies and analytics choices

Essential browser storage keeps you signed in, remembers your cart and preferences, and protects core features. Optional analytics and session recording load only after you accept them. You can change that choice at any time.

9. Retention and deletion

Deleted people are normally kept in a recoverable state for up to 30 days, then permanently removed by scheduled cleanup. Tree deletion also schedules related photo and design cleanup. Order, payment, security, rate-limit, and audit records may be retained as needed for fulfillment, fraud prevention, accounting, disputes, and legal obligations. Provider backups and logs expire on their own schedules.

10. Your choices and rights

You can edit or delete tree information, export a tree, revoke invitations and share links, and disable optional analytics. To ask for a copy, correction, or deletion of account data, email support@mydesitree.com. We may need to verify your identity before acting on a request.

11. Children

The service is not directed to children under 13. Adults who add information about children are responsible for doing so lawfully and limiting sensitive details.

12. Contact

Privacy questions and requests can be sent to support@mydesitree.com.