Privacy policy

Who we are

This website is operated by the studio of artist Hedieh Sharifzadeh, based in Columbus, Ohio. Questions about this policy can be sent to hedi.sharifzadeh@gmail.com.

Information we collect

Account details: if you create an account, we store your name, email address or phone number, and the sign-in method you used. Passwords and verification codes are handled by Firebase Authentication and are never visible to the studio.

Orders: when you buy a work we keep your name, email address, billing and shipping addresses, the works purchased, and the amounts paid. Card details are entered on Stripe and are never received or stored by this website.

Cart and saved works: works you add to your cart or save to your account. If you are not signed in, your cart is kept only in your browser.

Studio assistant: messages you send to the assistant and its replies. Without an account these are linked to a random identifier stored in your browser. To prevent abuse we also keep a one-way hash derived from your network address, never the address itself.

How we use it

We use this information to process and ship orders, provide account features, answer your questions, prevent fraud and abuse, and meet tax and accounting obligations. We do not sell your information, and we do not send marketing email unless you ask us to.

Service providers

Google Firebase and Google Cloud host the website, accounts, and database. Messages sent to the studio assistant are processed by the Google Gemini API to generate replies. Stripe processes payments. Google reCAPTCHA helps protect sign-in and site services from automated abuse. Videos are hosted on YouTube: nothing is loaded from YouTube until you choose to play a video, and playing one loads YouTube’s player. Each provider handles data under its own privacy terms.

Cookies and browser storage

The site uses browser storage to remember a guest cart and the assistant’s visitor identifier. Firebase and reCAPTCHA may set storage needed for secure sign-in. We do not use advertising or cross-site tracking cookies.

Retention and your choices

Order records are kept as long as tax and accounting rules require. You can ask to see, correct, or delete your account information and assistant conversations at any time by emailing hedi.sharifzadeh@gmail.com.