Effective date: July 2026
Oat & Ink (“we”, “our”, “us”) operates oatandink.com. This policy explains what information we collect, how we use it, and your rights over it.
1. Information We Collect
- Account information — When you sign in via Google or email OTP, we collect your email address and name.
- Order information — Shipping address, phone number, and payment confirmation details collected at checkout (processed by Shopify and Razorpay).
- Photos — Images you upload through our Craft Your Book tool are temporarily stored in a private Google Drive folder accessible only to our design team.
- Usage data — Standard web analytics (pages visited, browser type, device) collected via Google Analytics.
2. How We Use Your Information
- To create, design, and deliver your photo book
- To send order confirmation and delivery updates
- To send a one-time welcome email to new accounts
- To provide customer support
- To improve our website and services
3. Photo Storage & Deletion
Your uploaded photos are stored in a private Google Drive folder during order processing. Photos are permanently deleted within 5 days of your order being fulfilled. We do not use your photos for any purpose other than creating your book.
4. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Shopify | Order management & checkout | shopify.com/legal/privacy |
| Razorpay | Payment processing | razorpay.com/privacy |
| Google Drive | Temporary photo storage | policies.google.com/privacy |
| Google OAuth | Sign-in | policies.google.com/privacy |
| Resend | Transactional email | resend.com/legal/privacy-policy |
| Cloudflare | Infrastructure & security | cloudflare.com/privacypolicy |
5. Cookies
We set one first-party cookie (oi_auth) to keep you signed in for 30 days. It contains your email and name only. No advertising or tracking cookies are set by us.
6. Data Retention
- Account data (email, name): retained while your account is active
- Order data: retained for 7 years for tax and legal compliance
- Photos: deleted within 5 days of order fulfillment
7. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing hello@oatandink.com. We will respond within 30 days.
8. Children
Our services are not directed to children under 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this policy periodically. The effective date at the top of this page will reflect any changes. Continued use of our services after changes constitutes acceptance.
10. Contact
For privacy-related questions: hello@oatandink.com