Privacy Policy

• Name and email address
• Billing and checkout information
• Order and transaction history
• Products, downloads, and licenses purchased
• Customer account information
• Communications sent to us
• Information submitted through forms or customer-support/chat features
• Marketing preferences
• Technical information associated with website use
• Photographs and information voluntarily submitted for custom One-on-One artwork

Payments are processed through Stripe using Lovable’s managed-payments integration. These providers process payment and checkout information to complete transactions and provide payment-related services. Heart Identity stores order information, including the customer’s email address, products purchased, order total, payment status, and checkout-session identifier. Our website application does not collect or store complete payment-card numbers.

• Process and administer purchases
• Deliver digital products
• Create and deliver commissioned artwork
• Maintain customer accounts
• Provide customer support
• Send receipts and transactional communications
• Restore or verify eligible purchases and licenses
• Maintain business, tax, accounting, fraud-prevention, and legal records
• Improve and secure our website
• Send marketing communications as permitted by applicable law
• Comply with legal obligations and protect our rights

Making a purchase, requesting a free resource, or contacting us does not by itself subscribe you to general marketing emails. We use the information you submit to fulfill the request, respond to your message, or administer the specific waitlist you join. With your permission, we may also add you to one of our marketing lists when you ask us to — for example, in person, by email, or in other settings outside the website. Every marketing communication will provide an appropriate way to unsubscribe. Opting out of marketing does not prevent us from sending necessary transactional communications concerning an order, account, custom artwork commission, or other requested service.

Photographs submitted for One-on-One With the Savior artwork are private by default. We use submitted photographs as reasonably necessary to create, communicate about, and deliver your commissioned artwork.

Reference photographs are generally retained while the commission is active and for approximately 90 days following final delivery, after which we intend to remove them from active systems when they are no longer reasonably needed. Copies may temporarily remain in backups or may be retained longer where reasonably necessary for legal compliance, fraud prevention, security, disputes, or similar legitimate purposes.

Heart Identity will not use your likeness or finished custom artwork publicly for portfolio, website, social media, advertising, email marketing, or promotional purposes merely because you submitted photographs. We will obtain separate affirmative permission before such public use.

Some Heart Identity products and resources are designed for children and families. However, our website’s purchasing, account, and email services are intended for adults or for use with appropriate parent or guardian involvement. We do not design these services for the purpose of knowingly soliciting personal information directly from young children.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate business, accounting, tax, licensing, customer-service, fraud-prevention, security, and legal purposes. Different categories of information may have different retention periods. One-on-One reference photographs have the more specific retention practice described above.

We use Lovable Cloud for website infrastructure, application data, account services, and file storage; Stripe through Lovable’s managed-payments integration for checkout; and Resend for sending website emails and receiving incoming email. Messages sent to team@heartidentity.life and orders@heartidentity.life are received through Resend and forwarded to our designated Gmail inboxes for customer support. Contact-form messages are stored privately in Lovable Cloud and may also be emailed to our designated support inbox. These providers process the information needed for their services, which may include names, email addresses, message contents, order information, and download links. Google processes messages delivered to our Gmail inboxes. Providers process information according to their applicable agreements and privacy practices.

Our pages load fonts from Google Fonts. This causes your browser to contact Google’s font servers and share technical request information, such as your IP address and browser headers.

Our website may link to third-party websites, including Amazon for purchases of The Miracle of Jesus. Information you provide directly to a third party is governed by that party’s privacy practices, not this Privacy Policy.

We use browser local storage to remember shopping-cart selections and maintain signed-in account sessions. Cart selections remain stored until they are removed or your browser’s site storage is cleared. Our hosting platform supplies visitor and website-performance analytics on the published website, including page-visit counts. The currently observed analytics uses a session cookie with a 30-minute lifetime and reports page visits and technical information, which may include page URLs, referrers, browser information, locale, and performance measurements. These counts are separate from records of resource requests and authorized downloads. Stripe and other service providers may use their own cookies or similar technologies when you interact with their services. You can manage cookies and site storage through your browser settings, although restricting functional storage may affect the cart or account login.

Heart Identity does not sell personal information to third parties for money. Certain privacy laws may define terms such as “sale,” “sharing,” or “targeted advertising” more broadly than an ordinary monetary sale. If Heart Identity implements advertising or analytics technologies that fall within those definitions, this Policy and the website’s privacy controls should be updated accordingly.

Depending on where you live, you may have rights concerning your personal information, potentially including rights to request access, correction, deletion, or other actions. You may submit a privacy request to team@heartidentity.life. We may need to verify your identity before completing certain requests. Some information may need to be retained even after a deletion request where retention is reasonably necessary or legally permitted.

Heart Identity uses reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. However, no internet transmission, website, or electronic-storage system can be guaranteed to be completely secure.

We may update this Privacy Policy as our business, technology, services, or legal obligations evolve. The current version will display its effective or last-updated date, and additional notice may be provided where appropriate or legally required.

Heart Identity, LLC Highland, Utah Email: team@heartidentity.life