Inquiry information
When you use our booking form, the information stays in your browser until you choose WhatsApp or email. It is then sent through that service under its own privacy terms. If you proceed with an order, authorized HeartMade staff may add the necessary project details to our protected order system.
Order records
We store operational details such as your name, contact information, recipient, event date, selected package, payment status, production status, and project notes in Supabase. Access is limited to approved staff accounts using authentication and database row-level security.
Customer content
Photos, messages, dates, and other memories you send are used only to discuss, create, deliver, and support your order. Customer media is kept in private storage and is not published without clear permission.
Personalized story links
Delivered stories use long random links. The link does not contain the story text, and direct customer access returns only approved presentation fields. Anyone who receives the complete link may view the story until HeartMade revokes it or its optional expiry is reached, so customers should avoid forwarding it publicly.
Payments
We do not ask for card or bank credentials through this website. Payment instructions are shared privately after package and availability confirmation. Staff may record an order's amount and payment status, but not your banking password or card credentials.
Retention and deletion
We keep project information only as long as reasonably needed to deliver and support the agreed service. You may request deletion, subject to records we must retain for legitimate business or legal reasons. Story access can also be revoked by staff.
Third-party services
WhatsApp, your email provider, Vercel, and Supabase process information according to their own policies. Avoid sending highly sensitive information through the inquiry form or personalized story.
Contact
Questions or deletion requests can be emailed to allahbadshah148@gmail.com.