Privacy

Who operates the store

Charmingly is operated by Lithibithi, 3905 Tampa Rd Unit 1709, Oldsmar, FL 34677, United States. For privacy questions or requests, email hello@charmingly.me.

Photos & designs

We use your uploaded photos, subject descriptions, and selected options to create and store your personal rendering and manufacture your order. Upload only images you have permission to use. Customer photos and renderings are privately stored and accessible to your signed-in account and authorized studio personnel. We do not publish your uploads in the example gallery or use them in advertising without your permission.

When you request a preview, your image and subject description are sent to OpenAI for image processing. Website hosting and storage providers process these files to operate the service. Storefront examples are separate from private customer uploads.

Accounts, orders & emails

We store your email and account identifier to save designs, authenticate you, and show your orders. Sign-in codes are sent by Resend; secure essential cookies keep you signed in for up to 14 days. Order records contain the selected design, options, requested changes, approval history, and contact and shipping details needed to fulfill your purchase.

Stripe processes payment details and calculates applicable checkout tax. This website does not store your card number. Resend processes your email address and transactional messages to deliver sign-in codes, order confirmations, and updates. Zoho handles messages sent to our customer support inbox. These providers may process data in the United States or other countries under their applicable service and data-protection terms.

We use information to provide the service you request, meet contractual and legal obligations, and protect the store against fraud and misuse. Optional analytics rely on your consent. Where applicable, you may object to processing based on legitimate interests.

Retention & your choices

Unpurchased designs that are not associated with an order or open checkout expire after 90 days and are removed, with any files no longer needed by another design, during routine maintenance when accounts or the studio are accessed. Purchased designs and order records are retained as needed for fulfillment, customer support, disputes, and applicable accounting or legal obligations. Shared files are retained while still needed for another saved design or order.

You can request access, correction, or deletion of your personal information by emailing hello@charmingly.me from the address associated with your account. We may verify your identity before acting and retain information we are required to keep. Depending on where you live, you may also have rights to portability, restriction, objection, withdrawal of consent, or a complaint to your local data-protection authority.

Optional analytics

If you allow analytics, we record the designer page, campaign tags, and events such as preview creation and checkout starts, using a random session identifier. Images, card details, and customer email addresses are not included in these analytics events. Analytics records are removed after 90 days during routine maintenance. You can change your choice through Privacy choices on the designer pages. Essential sign-in and payment processing still work if you decline analytics.

Advertising measurement is a separate optional choice. If enabled by the studio and allowed by you, we send checkout starts and confirmed live purchases to Meta through its Conversions API. This includes purchase value excluding tax and shipping, generic charm category, event time, a random identifier, a hashed email address, browser information, IP address when available, and a Meta ad-click identifier when supplied in your visit. Hashing does not make an email anonymous: Meta can use it to match activity to an account for attribution and advertising. We do not send photos, renderings, design instructions, names, mailing addresses, or private account/order URLs, and we do not install a Meta browser script. You can decline or withdraw advertising consent through Privacy choices on any page; this stops future sharing and cancels pending unsent events for this browser. Previously delivered events may remain with Meta under its privacy policy. We respect Global Privacy Control. Consent records and undelivered tracking data are retained for up to 90 days during routine maintenance; delivered event payloads are cleared after acceptance. We do not sell customer photos.

Updates

We will update this page when our practices change. Last updated September 19, 2026.