Privacy Policy

CrestConnections provides shared community postcard advertising. This policy covers information collected through our website, enquiries, ad reservations, customer accounts and service communications. It does not replace the separate privacy policies of payment, sign-in or other service providers when you use their services directly.

We collect the details you submit, which may include your name, email, phone number, business name, category, website, business address, city, ZIP code, selected location campaign, preferred neighborhoods, ideal customer description and business description. We also process enquiry messages, uploaded ad images, proof approvals and notes.

For purchases and subscriptions, we maintain order identifiers, plan selections, payment status, invoice and transaction records, renewal information and cancellation records. An optional account also provides an account identifier and verified email. Please do not submit government identification numbers, financial account details, private health information, customer lists or other sensitive information in images, notes or enquiries.

We use information to answer enquiries, review ad suitability, prepare and administer campaigns, confirm payments, manage subscriptions and account access, record proof approvals, provide mailing information, send service emails, prevent misuse, troubleshoot problems and meet legal or recordkeeping obligations.

Your location and target-area preferences help us plan the advertising service. Submitting a preferred neighborhood, audience or ZIP code does not guarantee delivery to a particular household or individual.

Before payment is made available, your submitted image and relevant ad text are sent through Lovable’s AI service for automated appropriateness review. The review produces an approval or rejection and may provide a reason. The image and relevant ad text are shared with the AI service providers needed to perform that review.

Automated review can make mistakes and is not verification of the truth, legality or ownership of an advertisement. Contact us if you believe your image was incorrectly rejected. Do not include private or sensitive personal information in advertising materials.

Service providers process information as needed for hosting and storage through Lovable Cloud, authentication and optional Google sign-in, AI image review, Stripe payments and billing, email delivery, and printing or mailing the purchased campaign. Stripe collects payment-card details through its payment form; our application retains billing references and transaction records rather than full card numbers or card security codes.

Your customer-approved ad image, business name and business contact details may appear on postcards distributed to households in the purchased campaign. Treat approved advertising content as public. Submitted business planning details are not automatically printed. Your account and privately stored ad files are not a public customer directory.

We may disclose information when reasonably needed to comply with law, respond to valid legal process, protect rights and security, or resolve disputes. This policy does not authorize use of your private enquiry or account information for unrelated advertising by other businesses.

The website uses browser storage and authentication cookies or tokens where needed to keep you signed in and support secure account functions. Hosting, payment and sign-in services may process technical information such as IP addresses, device or browser information, error reports and transaction-security signals.

You can manage cookies and stored website data in your browser; disabling essential storage can prevent sign-in or payment features from working. This notice does not treat a visit to the website as consent to optional advertising tracking. Additional nonessential tracking should be separately disclosed and consent obtained where required before it is enabled.

Order, enquiry, account, approval and billing records may remain stored while needed to provide services, resolve disputes, prevent fraud or satisfy applicable legal, accounting and recordkeeping duties. We do not currently promise an automatic deletion schedule or a fixed retention period for all records. Ask us about deletion of a specific record.

Access controls and private file storage help restrict access to customer records. No system can guarantee absolute security. Information may be processed in the United States or other locations used by our service providers. Any legally required incident notices will be handled under applicable law.

Email contactcrestconnections@gmail.com to request access to, correction of or deletion of your information, or to ask about applicable privacy rights. We may verify your identity and authority over the business or account before acting. We will assess requests under applicable law; some records may need to be retained for ongoing service, legal obligations or disputes. Deletion cannot retrieve postcards already printed or distributed.

Order confirmations, receipts, cancellation notices and other essential service messages are separate from promotional marketing. This website’s enquiry or purchase forms do not by themselves authorize unrelated promotional texts or emails. Where promotional communications are sent, applicable consent and opt-out requirements must be respected.

This service is intended for adults acting for businesses and is not directed to children under 13. Do not submit children’s personal information without all required permissions. Contact us if you believe a child’s information was submitted improperly.

We may update this policy as our practices change. The effective date identifies the current version. Where required, material changes will be notified and any additional consent obtained before the new use occurs.