Last updated: [update this date when you publish]
This policy covers Petalworks, operated by [your legal entity name — e.g. Petalworks LLC]. It applies to Shop owners who create a seller account, and to buyers who place an order or use a buyer-facing feature (gift messages, group gifting, the care companion, the recipient quiz, relationship reminders).
Shop accounts: name, email, hashed password, shop name and catalog details you enter. Buyers: name, email and (optionally) phone you provide at checkout, the recipient's name, phone and delivery address, order details, the occasion if you choose one, and anything you type into the AI concierge or care chat. Photos: catalog and bouquet photos shops upload, an inspiration photo if you choose to upload one (it's shared with that shop so they see what you have in mind), photos of your finished bouquet and its delivery, and couples' event inspiration photos. We never ask a buyer to create an account.
Features like the AI concierge, photo-to-catalog entry, event proposals, and the care companion send the relevant text (and, for photo entry, the image) to Anthropic's Claude API to generate a response. We only send what's needed for that feature — a Shop's own catalog and your prompt — never another Shop's data.
Payments are processed by Stripe. We do not store your full card number — Stripe handles that directly. Shops receive payouts via Stripe Connect, which requires Stripe's own identity-verification information collected directly by Stripe, not by us.
We use a session cookie to keep a Shop owner (or platform admin) signed in. We don't use advertising or cross-site tracking cookies. Buyers placing a solo order never get a session cookie at all — solo checkout doesn't require one.
To operate the storefront and dashboard, process orders and payouts, power the AI features described above, send messages about your order (confirmations, the photo of your bouquet to approve, delivery notices, care check-ins), and prevent abuse.
A shop's reminders and special offers are sent only if you ticked the box asking for them at checkout (or asked to be reminded about a date). Texts are sent only with your express consent, say how to stop (reply STOP), and are limited in frequency. Every marketing email has a one-click unsubscribe link, which stops all reminders and offers from that shop. Not opting in never affects your order.
Second Bloom. If a buyer adds a Second Bloom, we text the recipient at the phone number the buyer gave for delivery, once or twice, only to let them pick a time for the florist to come back (reply STOP to stop). The time they pick and any note they add are shared with that shop only.
We share data with the service providers that make the Platform work — Stripe (payments), Anthropic (AI features), and our email/hosting providers — strictly to provide the Platform. We don't sell personal data.
You can ask us to access, correct, or delete your data by contacting support@yourdomain.com. A Shop owner can edit or remove their catalog and account details directly from the dashboard.
Questions about this policy: support@yourdomain.com. See also our Terms of Service.