Legal
Privacy Policy
Last updated June 25, 2026
On this page
1. Introduction
This Privacy Policy explains how carvdbox, referred to in this policy as carvdbox, we, us, or our, collects, uses, shares, and protects personal information when you visit our website or place an order. By using our website or placing an order, you agree to the practices described in this policy. If you do not agree with this policy, please do not use our website or provide us with your personal information.
2. Information we collect
We collect information you provide directly to us when you use our box builder and place an order, and limited technical information collected automatically when you visit our website.
Information you provide to us
- Order and personalization details. The engraving message, signature, motif selection, and whether you chose to add a printed photo, along with the photo file itself if you choose to upload one.
- Contact information. Your name and email address, collected so we can communicate with you about your order.
- Shipping address. Street address, apartment or suite number, city, state or province, postal code, and country, collected so we can deliver your order.
- Payment information. As described in section 5 below, your payment card details are collected and processed directly by our payment processor, Stripe. We do not collect or store your full card number, expiration date, or security code on our own systems.
- Correspondence. If you email us at support@carvdbox.com or otherwise contact us, we keep a record of that correspondence to assist you and to improve our service.
Information collected automatically
- Usage and device information. Our website hosting provider may automatically log standard technical information such as your browser type, general device information, and pages visited, for the purpose of operating and securing the website.
3. How we use your information
We use the information we collect to:
- Create, personalize, manufacture, and fulfill your order, including engraving your chosen message and printing a photo if you selected that option
- Process your payment through our payment processor
- Communicate with you about your order, including order confirmation, shipping updates, and responding to support requests
- Maintain internal records of orders for fulfillment, accounting, and customer service purposes
- Improve our website, products, and customer experience
- Comply with legal obligations, resolve disputes, and enforce our agreements
We do not sell your personal information to third parties, and we do not use your engraving message, photo, or personal details for advertising or marketing purposes beyond communicating with you directly about your own order.
4. Third parties we share information with
We rely on a small number of trusted third party services to operate carvdbox. We share only the information necessary for each service to perform its function. We do not permit these providers to use your information for their own independent marketing purposes.
| Service | Purpose | Information shared |
|---|---|---|
| Stripe | Payment processing | Your name, email, shipping address, and payment details, entered directly on Stripe's own secure payment page |
| Resend | Transactional email delivery | Your email address and order details, used to send order confirmation and notification emails |
| Airtable | Internal order record keeping | Order details including your name, shipping address, engraving content, and order status, used internally to track and fulfill orders |
| Netlify | Website and application hosting | Standard technical hosting logs necessary to operate the website and process orders |
We may also disclose information if required to do so by law, in response to a valid legal request, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of carvdbox, our customers, or others. If carvdbox is involved in a merger, acquisition, or sale of assets, customer information may be transferred as part of that transaction, subject to this policy or a successor policy.
5. Payment information
All payments made on carvdbox are processed by Stripe, Inc., a third party payment processor. When you click to pay, you are redirected to a checkout page hosted directly by Stripe. Your card number, expiration date, and security code are entered on that page and transmitted directly to Stripe. carvdbox never receives, sees, or stores your full card details. Stripe's own privacy policy, available at stripe.com/privacy, governs how Stripe handles the information you provide directly to them.
6. How long we keep your information
We retain order information, including engraving content and shipping details, for as long as necessary to fulfill your order, respond to any related support requests, and comply with our legal, tax, and accounting obligations. If you would like us to delete personal information we hold about you that is not otherwise required to be retained for these purposes, contact us at support@carvdbox.com and we will respond to your request.
7. Your rights and choices
Depending on where you live, you may have certain rights regarding your personal information, which may include the right to request access to the personal information we hold about you, the right to request correction of inaccurate information, the right to request deletion of your information, and the right to object to or restrict certain uses of your information. To exercise any of these rights, contact us at support@carvdbox.com. We will respond within a reasonable timeframe and in accordance with applicable law.
8. Cookies and similar technology
Our website may use limited cookies or similar local storage technology necessary for the website and checkout process to function correctly, such as remembering your progress while building your box. We do not currently use cookies for third party advertising or cross site tracking.
9. Children's privacy
carvdbox is not directed at children under the age of thirteen, and we do not knowingly collect personal information from children under thirteen. If we become aware that we have collected personal information from a child under thirteen without verification of parental consent, we will take steps to delete that information.
10. Security
We take reasonable technical and organizational measures designed to protect the personal information we collect, including relying on established, reputable third party providers such as Stripe for payment processing rather than handling sensitive payment data ourselves. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. If we make material changes, we will update the date at the top of this page. We encourage you to review this policy periodically.
12. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact us at support@carvdbox.com or visit our contact page.