Start a card

Privacy policy

Last updated: 10 October 2026

CardShare.ai ("we", "us") runs cardshare.ai and related services that let you create group greeting cards, collect messages from others, and share finished cards. This policy explains what information we collect, why we use it, and the choices you have.

Who this applies to

It covers people who create an account, build or manage cards, and anyone who opens a contribute or view link. Contributors can add a note without signing up; we still process the content they submit and basic technical data needed to run the service.

Information we collect

  • Account information: Such as your email address and sign-in details when you register or use Google or GitHub login.
  • Card content: Recipient and sender names, headlines, messages, cover images, GIFs, layout choices, and contributions from people who sign your card.
  • Uploaded photos: Photos you add to draw a cover are sent to our AI partner to make the image, then discarded. We store the cover that is drawn, not your photo.
  • Golden tickets: When you make a golden ticket, we store the names and engraved portrait printed on it (drawn from your photo, which is discarded as above) and show them to anyone with its link. Deleting a ticket deletes its portrait, and engravings you don't use on a ticket are deleted within about an hour. When someone claims a ticket, we record it and show their profile name to the ticket's owner, so the perks reach both of you.
  • Link and session data: Contributor links are unlisted but not secret; anyone with the link can view or sign the card depending on the page. We may store edit tokens in your browser so you can update your own contribution from the same device.
  • Usage and diagnostics: Pages visited, feature use, and similar product analytics (for example via PostHog) to understand what works and fix problems.
  • AI processing: Prompts and context you provide for headlines, messages, or cover art, plus the outputs our AI partners return. Do not include sensitive personal data you do not want processed for generation.
  • Slack integration: If you install our Slack app, we receive workspace and user identifiers needed to run slash commands and deliver card links in Slack. When you run /cardshareai team, the app reads your workspace's member list (names and profile photos) so you can choose who to add to a team, and shows which teams were already made from your workspace so you can ask to join one. We only keep the people you pick, and only the photos you choose to bring. When you message the app, it reads your conversation with it; when you mention it in a channel or group message, it reads the thread you mentioned it in, including other people's messages there. It sends that to our AI provider to write its reply, and keeps a record of the exchange in our AI usage logs.
  • Teams: Teams you create or join, and the people on them, added by hand, from Slack, or by joining: their name, and if added, a photo, birthday (day and month only) and work start date. When you join a team you appear on its list of people, linked to your account, with your profile name and photo; if you were imported from Slack, we match you through the Slack account you linked. Everyone in a team can see and edit its people. Anyone with a team's invite link, or a person's own invite link, which only its admins can see, joins the team. When you ask to join a team made from your Slack workspace, its admins see your name, profile photo and email address. A person's photo is sent to our AI partners only when you use it on a card cover. Removing someone deletes their photo, and deleting a team deletes its people. When you leave a team you stay on its list, still linked to your account, so if you rejoin you're the same person on it. When you delete your account, you leave your teams, and a team you were the last member of is deleted. Cards made in a team are the team's: everyone in it can see, edit, send and delete them, except the person a card is for, from whom it's hidden until it's sent. When you leave a team, cards you made in it stay with the team; when you delete your account, they pass to another member. Deleting a team returns its cards to the people who made them.
  • AI assistants: If you connect an AI assistant such as Claude, ChatGPT or Slackbot, it sends us the card details you give it and receives the results. The company that runs the assistant handles that data under its own privacy policy.

How we use information

We use data to:

  • Host cards, authenticate users, and deliver email you request
  • Generate and refine AI copy and images at your direction
  • Display cards to people you share links with
  • Improve reliability, security, and the product experience
  • Comply with law and respond to valid requests

We do not sell your personal information.

How we share information

We use trusted service providers for hosting, databases, authentication, email, analytics, AI, and (if you use it) Slack. They process data on our instructions to operate CardShare.ai. When you share a card link, you control who receives it. We do not publish cards in a public directory.

Retention

Card data is kept while your card exists in our systems. You can delete cards from your dashboard. If you want your account removed, email us. We may keep limited logs and backups for security, fraud prevention, and legal obligations, then delete them when no longer needed.

Your choices

  • Review and edit card content before sending or sharing links
  • Delete cards you manage from the dashboard
  • Ask us for access, correction, or deletion of account-related data at cardshareai@gmail.com
  • Use browser controls or opt-out tools where available for analytics cookies

Security

We use industry-standard measures such as encrypted connections and access controls. No online service is perfectly secure; please use a strong password and treat share links like private invitations.

Children

CardShare.ai is not directed at children under 13, and we do not knowingly collect their personal information. Contact us if you believe we have done so and we will take appropriate steps.

International users

We may process and store information in countries where we or our providers operate. By using the service, you understand your data may be transferred to those locations, with safeguards where required by law.

Changes

We may update this policy from time to time. We will post the new date at the top of this page. Continued use after changes means you accept the updated policy.

Contact

Privacy questions or requests: cardshareai@gmail.com.