Private cards, in plain language.

Who operates JEMSTONE

JEMSTONE LLC operates the JEMSTONE service and is responsible for the information handling described in this notice.

Adult-controlled service

The JEMSTONE card service is designed for adults age 18 or older. A parent, guardian, authorized representative, or adult participant may create, save, and order a card. Children should not create card accounts or submit card-service forms. Team or group projects require appropriate authority and permissions for each participant.

Account and sign-in information

Your account uses a permanent identifier so you can change your verified email address without losing saved cards or orders. We store your name, email address, verification status, and a salted password hash. We do not store your password in plain text. Sign-in sessions use essential cookies, and security records may include your IP address and browser information. Verification and password-reset emails are sent through our transactional email provider.

We remember your selected website language in a preference cookie and, when you are signed in, in your account so we can use it for future visits and account emails. Changing the website language does not translate your saved names, stories, or card content.

If you add a passkey, we store its public credential and device label so you can recognize and remove it. Your device or password manager keeps the private key. JEMSTONE does not receive your fingerprint, face scan, or device unlock code.

Customers who previously signed in with ChatGPT can connect a verified JEMSTONE login after proving access to both accounts. Matching email addresses alone do not connect accounts. You can manage your email, password, and JEMSTONE sessions from your account page.

Participant and card-project information

The participant details, card-back text, photo, logo, and framing choices stay on your device while you design. The browser keeps an unfinished local draft so a refresh does not erase your work; Reset clears that draft. JEMSTONE receives the card content when you deliberately save it or submit an assigned card. For a group order, the organizer may already have provided the participant label, organization, activity, role, season or year, requested quantity, invitation note, and target date before the card is opened.

What a private save stores

Saving a card stores the following with your signed-in adult account:

• The text and design choices visible on the card
• The crop position, zoom, template version, and saved revision
• A prepared copy of the participant photo and optional group logo
• Your relationship category and adult rights confirmation
• Technical identifiers needed to enforce private ownership

Before upload, supported images are re-encoded in your browser to remove embedded metadata such as camera and location fields. In People, you can optionally save a birthday, gender, city, state or province, and country in a private person profile. These details are not added to cards automatically. JEMSTONE does not ask for a child email, social account, private school or practice schedule, or biometric identifier. Do not place private locations or contact details on a card.

Group orders, invitations, and review

An authorized adult organizer may create a private roster and issue a unique invitation for a participant's assigned card. We store the roster details the organizer provides, the invitation's status and expiration, the adult account that claims it, relationship and authority confirmations, and timestamps and technical identifiers needed to protect the assignment. Keep invitation links private. A claimed invitation provides access to that assigned card—not the rest of the roster or other participants' cards.

When an assigned card is submitted, the organizer can view its front and back proof, requested quantity, submission state, and the exact saved version under review. The organizer may approve it, request changes, add a review note, exclude it from the group order, or include its approved, version-locked design in a combined pricing and production review. Review notes are visible to the assigned adult and authorized organizer. A target submission date is planning guidance and does not automatically close submissions.

Candidate introductions

When you introduce yourself through our Careers page, we collect your name, email, area of interest, introduction, and any location, profile link, or résumé you choose to provide. We use this information to review your interest and contact you about opportunities. Submitting an introduction does not create a customer account or subscribe you to marketing.

Candidate information, private review notes, and résumés are available only to authorized owners reviewing introductions. Our hosting, storage, and email providers process the information needed to operate this service. Résumés are stored privately, and notification emails contain a reference rather than the résumé or introduction.

We remove candidate records and uploaded résumés from active storage after two years without activity. Historical recovery copies and email-provider records may retain information separately; recovery copies are restricted to system recovery. Following restoration, expired candidate records remain unavailable in the candidate inbox and are removed by scheduled cleanup. Contact support@jemstonelabs.com to request access, correction, or deletion, subject to applicable recordkeeping requirements.

Adult purchaser and delivery information

Ordering requires a valid email for the signed-in adult purchaser and information about the recipient or delivery destination, such as a name and shipping address. This fulfillment information is kept separate from the card design and is used to complete the order, provide support, prevent fraud, and meet accounting or legal duties.

Hosted payment processing

At checkout, payment details are entered on our payment provider's hosted checkout. JEMSTONE receives transaction identifiers, payment status, totals, and the purchaser and shipping details needed to fulfill the order. JEMSTONE does not receive or store the complete payment-card number or card security code.

How information is used

Saved content is used to show the adult account its private card, preserve revisions, provide deletion controls, create approved design references and production handoffs, fulfill purchases, resolve delivery or replacement issues, and protect the service. JEMSTONE does not sell saved card content, publish participant profiles, use it for targeted advertising, or use participant images to train artificial-intelligence models.

Minimal service measurement

To understand whether the creation and ordering flow works, the site records a small allowlist of lifecycle events, a random browser-tab session identifier, a broad device class, and elapsed time. These event records do not include a name, email, account identifier, sport, card text, image, design identifier, referrer, price, or address. Owners see aggregate event and session counts only. Event records are removed after 13 months and are not used for targeted advertising.

Service providers and limited disclosure

Images are stored in private object storage and served only after an account ownership check. Website and storage infrastructure providers process information to operate the service. Payment providers process checkout; production suppliers receive only the approved production materials and delivery details needed for an order; carriers receive delivery details; and email providers deliver transactional messages.JEMSTONE limits what it sends to each provider to what is needed for that service. Providers process information under the applicable service terms, privacy commitments, agreements, and their own legal or security obligations.

Privacy-safe order notifications

Transactional emails contain an opaque order reference, a general status, a link that requires account access, and a support contact. They do not include the participant's name, photo, grade, street address, or payment details.

Retention and deletion

A saved card remains available until the adult deletes it or the service applies a disclosed account-retention rule. Deleting a card in Saved cards also removes its locked design records and private image objects when the card has never been attached to an order. When a card is connected to an individual order, the adult can remove its editable Saved Cards copy and uploaded project media. The approved proof and minimum order, approval, transaction, production, and support records remain available in Orders for as long as they are needed. Archiving only organizes the Saved Cards view; it does not remove an order or its history. Cancelled orders are grouped under Closed in Orders. Contact support for an account-specific retention review. Paid-order records and production assets may be kept as needed for fulfillment, tax and accounting, disputes, safety, replacements, and legal obligations. We minimize or remove card images and participant design content when they are no longer needed for those purposes.

A card submitted to a group order may be unavailable for direct deletion while it is attached to that order or needed to preserve an approval, version lock, pricing request, or audit history. Excluding a participant removes the card from the active group order; it does not necessarily erase the group-order record. An organizer cannot delete a contributor's account. The signed-in adult may contact support for a card-specific deletion and retention review.

Access and export

A signed-in adult can download a machine-readable copy of their account, card, approval, order, fulfillment, and notification records from Saved cards. The export includes private image metadata and integrity hashes but does not embed image files. Use the contact page to request a copy of stored media, a correction, or help with a deletion or retention review.

When you request access through a shared team link, we store the participant name, your account, your relationship to the participant, your authority confirmation, and the request status. The organizer sees your account email and request details to decide which card to assign. A shared link or access code does not expose the roster or grant card access without approval. Pending, declined, and withdrawn requests are retained as part of the group record and are included in your account export. Contact support to request their removal.

Within a group order, an organizer can access roster and review records for orders they are authorized to manage. An invited adult can access their claimed assignment, submitted proof, and organizer review note, but not other roster entries or proofs.

Order safeguards

Before payment, JEMSTONE confirms the seller, selected product, price, delivery estimate, policies, support contact, and production requirements. The product details you approve are preserved with the order.

Requests and updates

Older contact records remain separate from customer card projects and are handled under the notice presented when they were collected. Use the contact page for an access, correction, deletion, privacy, or photo-rights request, or email support@jemstonelabs.com. We may update this notice as the service changes, but the privacy and purchase records tied to a completed order remain preserved with that order.