Privacy policy

Fondest (“we”, “us”) runs this website, the label Studio and the Fondest Shopify app. Fondest designs and sells custom-label hot sauce, condiments and drink mixers, made in Colorado. This policy explains what information we collect, why, who we share it with, and the choices you have.

1. Information we collect

Designs you create

When you use the Studio we save your label design: the product and flavor you picked, who it is for (gift, corporate or brand), the text you type, colors, layout, and preview images of the label and bottle. Designs are saved automatically so you can come back to them.

Images you upload

Photos and logos you upload are stored with our cloud storage provider so they can appear on your label and be printed. Uploaded images and label previews are stored at unguessable public web addresses so they can be shown in the Studio, in order emails and pages, and on products merchants create; anyone who has one of those addresses can view the image. Please don’t upload images you don’t have the right to use or that contain sensitive information.

Orders and payments

Checkout is run by Stripe, our payment processor. Stripe collects your payment details under Stripe’s privacy policy; we never see or store your full card number. From Stripe and from you we receive your name, email address, phone number, shipping address, what you ordered, the amounts paid and the payment status, plus any gift note you add. Each order also has a private link to its status page.

Shopify merchants (brand accounts)

If you install the Fondest app on a Shopify store we store your shop domain and name, the shop and contact email addresses, the ship-to address and inventory location you choose for stock, an access token issued by Shopify, the designs and draft products you create, and your stock orders. The app does not read your customers’ data or your store’s orders.

Information stored in your browser

To let you keep editing a design without an account, the Studio stores a private edit key for each design in your browser’s local storage. We don’t use advertising cookies or cross-site tracking. Our hosting provider keeps standard server logs (such as IP address, browser type and pages requested) for security and to limit abuse.

Site analytics

To see which pages and Studio features are used, we may count page views and a few actions (for example opening the order panel or starting checkout) with Vercel Web Analytics. It sets no cookies and doesn’t identify you across sites; we remove order links, private pages and anything you typed before an event is recorded, and events never include your name, email or design.

Wholesale quote requests

If you ask for a wholesale quote, we keep what you enter in the form (business and contact name, email, phone, website, products, quantity and your message) to answer you and prepare an invoice, plus a one-way hash of your IP address to limit abuse.

2. AI design tools

If you use “Design with AI”, we send what you ask for (your description, the label name and text you typed, the product, flavor and audience) to Anthropic’s Claude API to suggest label layouts. If you ask the AI to use your logo or photo, or to improve a design you made, we also send that image or a picture of your label. Your order, payment and contact details are never sent.

To draw artwork for a label, our AI writes a short description of the picture (never your photos or your exact words) and sends it to Recraft, which returns the drawing. If you use “Remove background”, the photo you chose is sent to Recraft to cut out its background. Anthropic and Recraft process these requests on our behalf under their API terms [counsel: confirm each provider’s current data-use and retention commitments and name them here]. We keep a record of each AI request, the artwork it produced and its cost to operate the feature, prevent abuse and keep artwork used in orders for reprints. If you give us your email to keep designing with AI, we use it only to send your sign-in link or the designs you asked for. If an AI service is unavailable we suggest designs from our own templates instead.

3. How we use information

• To save, render and print your labels, and to produce, ship and track your order.
• To provide the Shopify app, including creating draft products and updating inventory when you ask us to.
• To send transactional emails about your order (confirmation, shipping and tracking) and to answer your questions.
• To keep accounting and tax records, prevent fraud and abuse, keep the service secure and fix problems.

We do not sell your personal information or share it for cross-context behavioral advertising.

4. Who we share it with

• Our production partner (a licensed commercial food producer in Colorado), which receives the order and shipping details it needs to make, label and ship your bottles: your name, shipping address, phone number, what you ordered, the print files and any gift note for the packing slip.
• Stripe, which processes payments and refunds.
• Shipping carriers, which receive the shipping address and phone number on the package.
• Shopify, when you use our app in your store (products and inventory we create for you).
• Our email delivery provider, database and file storage provider (Supabase) and website hosting provider.
• Anthropic and Recraft, only for the AI design tools as described above.
• Vercel (Web Analytics), for the cookieless page and feature counts described above, when enabled.
• Authorities, when required by law or to protect our rights and the safety of others.

5. Retention

• Designs and uploads that were never ordered: kept while they are in use; we may delete designs untouched for 24 months.
• Ordered designs, print files and order records: kept as long as needed for production, reorders, tax and accounting obligations.
• When a merchant uninstalls the app, we stop accessing the store. When Shopify sends a shop redaction request we delete the shop’s designs, uploads and products and remove contact and address details from its orders, keeping only the minimal financial record (order number, dates, quantities, amounts and payment references). Orders that are paid but not yet delivered keep the label, print files and shipping details needed to finish them until they are delivered, cancelled or refunded; those details are removed then.
• AI request records: kept for up to 12 months.

6. Your rights (GDPR, UK GDPR, CCPA/CPRA and similar laws)

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict some processing, and not to be discriminated against for exercising these rights. California residents may also ask what categories of personal information we collect and disclose. To make a request, email privacy@getfondest.com with enough detail for us to find your data (for example your order number or the email used at checkout). We will verify the request and respond within the time the law requires. You may use an authorized agent, and you can complain to your local data protection authority.

7. Security and transfers

We use encryption in transit, access controls and private storage for print files. Our providers may process data in the United States and other countries; where required we rely on appropriate safeguards such as standard contractual clauses.

8. Children

The service is not directed to children under 13, and we do not knowingly collect their personal information.

9. Changes and contact

We will post changes to this page and update the date above. Questions: privacy@getfondest.com, or see our contact page.