Privacy Policy

Branch & Bond (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our family tree artwork service. Please read this policy carefully. By using Branch & Bond, you consent to the practices described below.

1. Information We Collect

We collect the following types of information to provide and improve our service:

• Account information: your name and email address when you create an account or sign in.
• Family tree data: names, dates, and relationships you enter manually or import from third-party services such as FamilySearch.
• Shipping addresses: postal addresses you provide when ordering printed artwork.
• Payment information: payment details processed securely through our payment provider (Stripe). We do not store your full credit card number on our servers.
• Usage data: basic information about how you interact with the service, such as pages visited and features used.

2. FamilySearch Data

When you connect your FamilySearch account, we import family tree data (names, dates, and relationships) through the official FamilySearch API. This data is handled with special care:

• FamilySearch data is imported solely for your personal family history use and for rendering your tree artwork within our service.
• We store only limited, ephemeral copies of FamilySearch data as needed to display and generate your tree. We do not retain more data than necessary.
• FamilySearch data is never sold, leased, or redistributed in its raw form. The artwork we produce is a derivative creative work, not a redistribution of FamilySearch data.
• You may request deletion of all FamilySearch-sourced data from your account at any time (see “Your Rights” below).
• If FamilySearch requests removal of any content, we will comply promptly.

3. How We Use Your Information

• To create, display, and store your family tree artwork.
• To process orders and deliver printed artwork to you.
• To send transactional emails such as order confirmations and shipping updates.
• To generate AI-powered background images for your tree artwork.
• To improve our service and fix issues.

4. Third-Party Services

We use the following third-party services to operate Branch & Bond. Each has its own privacy policy governing how it handles your data:

• Stripe — payment processing. Your payment information is sent directly to Stripe and handled under their privacy policy.
• Printful — print fulfillment. Your shipping address and order details are shared with Printful to produce and ship your prints.
• Google Vertex AI — background image generation. We send prompts (not your personal data) to generate artwork backgrounds.
• Resend — email delivery. Your email address is used to send transactional messages such as order confirmations.
• FamilySearch — family tree data import. Data is accessed through the official FamilySearch API with your authorization.

5. Cookies

We use session cookies to keep you signed in and to maintain your authentication state. These cookies are essential for the service to function and are not used for advertising or tracking. We do not use third-party advertising cookies.

6. Data Retention

• Tree data: stored as long as your account remains active. When you delete your account, your tree data is removed.
• Order data: retained as required for legal, tax, and accounting purposes, even after account deletion.
• FamilySearch data: retained only as long as needed to render your tree. You may request its deletion at any time.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Export your data in a portable format upon request.
• Delete your account and all associated data.
• Purge FamilySearch data specifically, without deleting your entire account.
• Correct inaccurate information.

To exercise any of these rights, please contact us using the information in the “Contact Us” section below.

8. Security

We take the security of your data seriously. We use encryption in transit (HTTPS) for all communications, store authentication tokens securely, and keep API keys confidential on our servers. Access to personal data is limited to authorized personnel only. In the event of a security breach affecting data sourced from FamilySearch, we will notify FamilySearch within 24 hours and cooperate fully with any investigation. We will also notify affected users as required by applicable law.

9. International Data Transfers

Branch & Bond and its third-party service providers may process data in countries other than your own. By using our service, you consent to the transfer of your information to the United States and other jurisdictions where our providers operate. We comply with applicable privacy laws and take reasonable steps to ensure your data is protected during international transfers.

10. Children's Privacy

Branch & Bond is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Branch & Bond
Email: privacy@branchandbond.com