Privacy Policy

1. Overview

Art for Grandma (“we”, “us”, “our”) is a platform that connects families and children with vetted grandma volunteers who respond to children's artwork with thoughtful video replies.

We are committed to protecting your privacy, especially because our service involves children. This Privacy Policy explains what information we collect, how we use it, how it is shared, and how we protect it.

2. Who This Applies To

• Families: Parents or guardians who create and manage accounts.
• Children: Children whose content is submitted through a Family account.
• Grandmas: Volunteer participants who receive letters and record video replies.

Children do not create accounts directly. All activity on behalf of a child is managed by a parent or guardian.

3. Information We Collect

• Account Information: Name, email address, password, and account type (Family or Grandma).
• Child Information: Information about a child provided by a parent or guardian, such as a first name, age, artwork, letters, and related content. We do not require full names for children.
• Artwork and Letter Content: Images of artwork, uploaded letters, and any notes or messages submitted with them.
• Grandma Information: Name, email address, profile details, and any onboarding or verification information we require for volunteer participation.
• Video and Media Content: Recorded video replies and related metadata such as upload dates, delivery status, and moderation status.
• Usage Data: IP address, browser and device information, pages visited, actions taken on the site, and timestamps.
• Payment Information: Payment details related to credit purchases, which are processed by third-party payment providers. We do not store full payment card details.

4. How We Use Information

• Provide the Service: To manage accounts, match letters with grandmas, deliver video replies, and send status updates.
• Operate the Platform: To maintain credits, prevent abuse, moderate content, and keep the service functioning properly.
• Improve the Product: To analyze usage patterns and improve the safety, quality, and experience of the platform.
• Communicate With You: To send transactional emails such as confirmations, notifications, and important service updates.
• Verify Volunteers: To review applications, evaluate eligibility, and maintain the safety and integrity of the volunteer community.

5. How Information Is Shared

We do not sell your personal data. We share information only in limited circumstances described below.

• Grandma Mailing Addresses: In order to facilitate the exchange of artwork and letters, we provide a volunteer grandma's mailing address to participating families. Such information may only be used for participation in Art for Grandma.
• Family Mailing Addresses: We provide a community return address that families may use when sending artwork and letters. Families may choose to include their own return address instead. Any family that voluntarily provides its own mailing address acknowledges that such information will be visible to the recipient grandma and is shared at the family's own discretion.
• Between Families and Grandmas: A grandma may receive a child's first name, artwork, and any optional note included with the submission.
• Restricted Information: Grandmas do not receive family email addresses, last names, or other direct contact information unless explicitly required for the service and disclosed in advance.
• Service Providers: We use trusted third-party vendors. These providers may include web hosting providers, video hosting providers, payment processors, analytics providers, and email delivery services.
• Legal or Safety Reasons: We may disclose information when required by law or when reasonably necessary to protect users, prevent fraud, investigate abuse, or enforce our policies.
• Business Transfers: If we are involved in a merger, acquisition, sale of assets, or other business transaction, user information may be transferred as part of that transaction.

6. Children's Privacy

By submitting information relating to a child, the parent or guardian consents to our collection, use, storage, and processing of that information as described in this Privacy Policy.

• Parent-Managed Accounts: Accounts involving children must be created and managed by a parent or guardian.
• Limited Collection: We collect only the information needed to provide the service.
• No Public Profiles: Children do not have public-facing profiles on the platform.
• No Direct Messaging: We do not allow direct messaging between children and grandmas.
• No Direct Collection From Children: We do not knowingly collect personal information directly from children. Information about children is provided by parents or guardians through family-managed accounts.
• Parental Control: Parents or guardians may review submitted content and request deletion of their child's information or content.

Parents, guardians, and volunteers may request deletion of their account and associated personal information by contacting us through the Contact Form.

7. Content Moderation and Safety

We may review uploaded artwork, letters, and video replies to help keep the platform safe and appropriate for families and volunteers.

• Moderation: We may monitor or review content for safety, quality, and compliance with our policies.
• Enforcement: We may remove content or suspend accounts that violate our guidelines or create safety concerns.

8. Data Retention

We retain personal information and content only as long as reasonably necessary to provide the service, maintain records, comply with legal obligations, and resolve disputes.

You may request deletion of your account and associated content, subject to any legal or operational retention requirements.

9. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information.

• Encrypted Connections: We use HTTPS and other standard security measures in transit.
• Access Controls: We limit access to personal information to those who need it to operate the service.
• Secure Storage: We use reputable service providers and infrastructure designed to protect stored data.

No system can be guaranteed to be completely secure, but we take privacy and security seriously.

10. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, delete, or request a copy of your data.

To make a privacy-related request, contact us through the Contact Form.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to keep users signed in, improve site performance, understand usage patterns, and support core functionality.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

You can control cookies through your browser settings, though disabling them may affect how the service works.

12. International Data Transfers

Your information may be processed or stored in countries other than your own, including the United States. Where required, we take reasonable steps to ensure appropriate safeguards are in place for such transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify users by email, through the website, or by updating the effective date above.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us: