LAST UPDATED OCTOBER 10, 2026

Privacy policy

Stonework stores the information a memorial workshop needs to review proofs and manage production handoffs. For privacy questions, corrections, exports or deletion requests, contact lpendeavors@gmail.com.

Information we collect

Account and staff names, email addresses, workshop details, password hashes, session identifiers, job information, purchaser and reviewer contact details, memorial inscriptions, uploaded proofs and documents, approvals, comments, packet records, and activity history. We record email delivery status and technical request information needed to operate and protect the service.

How we use it

We use this information to provide the service, verify accounts, deliver requested messages, retain approval records, manage billing, answer support requests, prevent abuse, and maintain security. We do not sell workspace information or use uploaded proofs to train AI models.

Who processes it

Vercel hosts the application. Supabase stores database records and private files in the United States. Resend sends transactional email. Stripe processes subscription payments; Stonework does not store full card details. These providers process information necessary for their services under their own terms and privacy policies.

Private links and access

Workshop staff can access records according to their assigned permissions. Anyone holding a valid private review or production link can access the proof or packet it permits. Protect these links. The workshop can revoke them. Temporary download URLs expire after about one minute; downloaded or printed copies cannot be recalled.

Cookies

Stonework uses a session cookie to keep staff signed in. The application does not currently use advertising cookies or third-party analytics trackers.

Retention, exports and deletion

Workspace records are retained while the account exists, including after a trial or subscription ends, so the workshop can read and export its history. The owner can export records from workshop settings. Contact us from the owner’s verified email to request account deletion or assistance exporting a large workspace. We may retain payment records required by law. Deleted records may remain in provider backups until those backups expire.

Your responsibilities and requests

Workshops should collect and upload only information they are authorized to use and tell customers how their information will be handled. Do not upload unrelated sensitive records. Individuals may contact the workshop controlling their job record or contact us for assistance with privacy requests.

Changes

We will update this page when our practices change. Material changes will be communicated to account owners.