Privacy Policy

This policy explains what Vinyette, LLC (“Vinyette”, “we”, “us”) collects, why, and what you can do about it. It applies to the Vinyette website, app and printed products. We are the controller of your information. You can reach us at 121 S Broad St, 15th Fl #333, Philadelphia, PA 19107, USA or info@vinyette.com.

1. What we collect

• Account details — your name, email address, password (stored only as a secure hash), profile photo if you add one, language, and notification preferences.
• Your travel content — Vinyettes, trip cards, destinations and dates, itineraries, packing lists, notes, memories you write, polls and chat messages in shared Vinyettes.
• Photos you upload — the image files themselves, plus any information embedded in them by your camera, which can include the date, camera model and, if you have location tagging switched on, the place the photo was taken.
• Purchase details — plan, credits, order history, shipping address for printed books, and the last four digits and card type from your payment provider. We never see or store your full card number.
• Technical information — IP address, device and browser type, pages viewed, and error logs, used to keep the service working and secure.
• Messages to us — feedback, support requests and waitlist sign-ups.

2. Why we use it, and our lawful bases

• To provide Vinyette — create your account, store and show your trips and photos, generate AI plans, artwork and maps, design and print your books, deliver orders, and let the people you invite see the shared Vinyette. Basis: performance of our contract with you.
• To take payment and prevent fraud. Basis: contract and legal obligation.
• To keep the service safe and working — security, debugging, abuse prevention, and understanding which features are used so we can improve them. Basis: our legitimate interests.
• To email you about your account, orders and shared-Vinyette activity. Marketing emails only if you opt in, and every one has an unsubscribe link. Basis: contract, or consent for marketing.

Your photos are only used to run Vinyette for you: to show your memories back to you and to the people you have shared that Vinyette with, to create the watercolour artwork and maps in your book, and to print the book you order. We do not sell your photos, do not use them for advertising, and do not publish them anywhere without asking you first.

How we store your photos

Original files are held in encrypted storage tied to your account, with smaller copies made for quick display and a print-quality version kept so your book comes out sharp. Access rules limit every file to your account and the people invited to that Vinyette. Information your camera embedded in the photo — date, camera model, and location if you have location tagging on — travels with the file; you can strip it before uploading if you prefer.

Where your photos are shown

In your own Vinyette, and to the people you invited to that Vinyette. Nothing is public, listed, or indexed by search engines. If you create a share link, anyone holding that link can view that Vinyette until you revoke it. Your photos are also sent to our print partner when — and only when — you order a book, and to our AI providers when you use an AI feature, under agreements that forbid training their general models on your content.

How to remove your photos

• Delete a photo in the app: it disappears for you and for everyone you shared it with immediately, and the stored file and its derivatives are deleted.
• Encrypted backups holding a deleted photo expire within 90 days.
• Close your account: all photos and content are deleted within 30 days, backups within 90 days.
• Books already printed or shipped cannot be recalled; order records are kept as tax law requires (section 6).
• Want a copy first? Export your content from settings, or email info@vinyette.com and we will help.
• Appear in someone else’s photo and want it removed? Email info@vinyette.com — see section 11.

3. AI processing

When you use an AI feature, the relevant text or photo is sent to our AI providers to generate the result and returned to you. We use providers under agreements that prohibit using your content to train their general models. You can avoid AI processing entirely by using Simple mode, which builds everything by hand.

4. Who we share information with

We share only what is needed, with:

• People you invite to a shared Vinyette — they see that Vinyette’s content.
• Cloud hosting and database providers that store the app and your files.
• AI providers for the features described above.
• Print and fulfilment partners — your book files and shipping address, to make and deliver your order.
• Payment processors — to take payment and handle tax.
• Email and notification providers — to send the messages you receive.
• Maps, weather and experience providers — to show places, forecasts and bookable activities.
• Authorities — where the law requires it, or to protect someone’s safety or our rights.
• A buyer, if Vinyette is ever sold or merged; we would tell you first.

We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising.

5. Where your information is stored

Vinyette is operated from the United States and our providers may process information in the United States and other countries. Where information is transferred out of the UK, Switzerland or the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses or another approved safeguard.

6. How long we keep it

We keep information only as long as it is useful to you or required of us. These are the periods we work to:

Your profile and account

• Profile details (name, email, photo, age, location, travel preferences, languages, dietary notes): kept while your account is open.
• After you close your account or ask us to delete it: your profile and content are deleted from the live app within 30 days, and from encrypted backups within a further 90 days.
• Inactive accounts: if you do not sign in for 3 years, we email you first and then delete the account and its content if you do not return within 30 days.

Uploaded photos

• Photos in your Vinyettes, stamps and memory books: kept while your account is open, or until you delete them.
• Photos you delete: removed from the app straight away and purged from storage and backups within 90 days.
• Photos in a shared Vinyette: deleting your account removes your photos for everyone in it; a photo someone else uploaded stays with their account.
• Photos sent to a printer as part of a book order: the print partner keeps the print file only as long as needed to produce and ship your book, typically up to 90 days.
• AI-illustrated versions (watercolor covers, maps, illustrations) follow the same timing as the photo they came from.

Trip and bucket-list content

• Vinyettes, cards, itineraries, packing lists, plans and notes: kept while your account is open, or until you delete them.
• Memories, captions and stamps: same — yours to keep or delete at any time.
• Group chat messages and comments: kept while the Vinyette exists; when you leave or close your account your messages are deleted within 30 days.
• A shared Vinyette you did not create: stays with its owner after you leave; your own contributions are removed with your account.
• Invite links: expire on their own and are deleted within 12 months.
• Guest and hotel content (guest itineraries, bookings, visit records): kept for 24 months after the stay, then deleted, unless the host deletes it sooner.

Everything else

• Order, payment and tax records: kept up to 7 years, as accounting and tax law requires. These survive account deletion — we keep the order, not your photos.
• Email delivery records: up to 12 months.
• Security and error logs: usually under 12 months.
• Privacy and deletion requests: kept 24 months so we can show we handled them.
• Waitlist and marketing sign-ups: until you unsubscribe or ask us to remove you.

We may hold something longer only where the law requires it or to resolve a dispute. If you want anything removed sooner, use our privacy and deletion request form.

7. Security

Traffic is encrypted in transit, files and databases are encrypted at rest, passwords are hashed, and access rules restrict every Vinyette to its owner and the people invited to it. Staff access is limited and logged. No system is perfectly secure, so if a breach affects your information we will notify you and the relevant regulator as the law requires.

8. Your rights and choices

Wherever you live, you can ask us to:

• give you a copy of your information, or export it;
• correct anything that is wrong;
• delete your account and content;
• restrict or object to certain processing, or withdraw consent;
• stop marketing emails at any time.

Most of this you can do yourself in settings. You can also use our privacy and deletion request form, or email info@vinyette.com and we will respond within 30 days (45 days for California requests where an extension applies). We will not treat you differently for exercising a right.

Europe and the UK (GDPR): you also have the right to complain to your local data protection authority, or to the UK Information Commissioner’s Office.

California (CCPA/CPRA): you have the rights to know, delete, correct, and to opt out of sale or sharing — we do not sell or share personal information as those terms are defined. The categories we collect and disclose are listed in sections 1 and 4.

Canada (PIPEDA): you may access and correct your information and complain to the Office of the Privacy Commissioner of Canada.

9. Cookies and similar technologies

We use cookies and local storage that are strictly necessary to sign you in and remember your preferences, plus limited analytics to understand how the app is used. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will not work without the necessary ones. Full details, and a way to change your choice, are in our Cookie Policy.

10. Children

Vinyette is for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

11. Photos of other people

Please only upload photos of other people where you have their agreement. If you appear in a photo on Vinyette and want it removed, contact info@vinyette.com and we will act on it.

12. Changes to this policy

If we make a significant change we will email you or tell you in the app before it takes effect. The date at the top always shows the current version.

13. Privacy contact and how we handle requests

Our privacy contact is info@vinyette.com, monitored by Vinyette, LLC. Write to us there — or use our privacy and deletion request form — about anything on this page: questions, access, correction or deletion requests, consent changes, complaints, or legal notices. Postal mail reaches us at Vinyette, LLC, 121 S Broad St, 15th Fl #333, Philadelphia, PA 19107, USA.

What happens after you contact us

• We acknowledge within 5 business days and tell you what we need from you, if anything.
• We check it’s really you before acting on a request about an account — usually by replying from the account’s email address. We ask for the least information needed, and we never ask for your password. If we cannot verify you, we will explain why rather than act on the account.
• We complete the request within 30 days (45 days for California requests where an extension applies, and we will tell you if we need it). Complex requests get an interim update.
• We confirm in writing what we did — what was deleted, exported or corrected, and anything we had to keep and why (for example order and tax records).
• If we say no, we tell you the reason and how to challenge it. You are never charged, and we never treat you differently for asking.

Changing your consent

• Marketing emails — use the unsubscribe link in any marketing email, or change it in your notification settings. Account, order and shared-Vinyette emails continue because they are part of the service.
• Cookies and analytics — change your choice any time on our Cookie Policy page.
• Sharing — remove people from a Vinyette, or revoke a share link, in the share settings for that Vinyette.
• AI features — switch that Vinyette to Simple mode to avoid AI processing entirely.
• Withdrawing consent does not undo processing that already happened lawfully, and it may mean parts of Vinyette stop working for you.

Legal and law-enforcement inquiries

• Send subpoenas, court orders, law-enforcement requests, and other legal notices to info@vinyette.com with “Legal” in the subject line, or by post to the address above.
• We review every request, require valid legal process, and produce only the narrow data the request actually covers.
• Unless a court order or the law forbids it, we notify the affected user before we disclose anything, so they have a chance to respond.
• Copyright or content complaints, and requests to remove a photo you appear in, go to the same address and follow the process above.

If you are not satisfied

Reply to our answer and ask for it to be escalated, and a member of the Vinyette team will review it again. You can also complain to your data protection authority — the UK Information Commissioner’s Office, your EU supervisory authority, the Office of the Privacy Commissioner of Canada, or the California Privacy Protection Agency — as set out in section 8.

14. Contact

Vinyette, LLC · 121 S Broad St, 15th Fl #333, Philadelphia, PA 19107, USA · info@vinyette.com · Terms of Service · Privacy requests