Privacy

What happens when you create a preview

The free pattern preview is local-first. Selecting a photo and creating the preview does not, by itself, upload the original source photo to MomentGrid.

If a later save, order or human-review step needs server-side data, that action is presented separately and requires the relevant consent. The original source photo is not permanently stored by default.

Data a later service step may need

A saved design, review or future live order may need pattern data, the approved review crop, contact or delivery information, order and payment references, support messages and security records needed to provide that service.

Analytics and logs must not contain raw images, payment credentials, secrets or unnecessary full-address data.

Retention and deletion

Final retention windows for saved-but-unordered, ordered and rejected media are still an explicit launch decision. MomentGrid will not publish fixed 1-day, 30-day or 180-day media periods as Current policy until those windows, the deletion procedure and the required evidence are approved.

Authorised storage is designed to support expiry, deletion and least-privilege access. The production configuration and deletion evidence must be verified before those controls are presented as a final operating commitment.

Gallery, advertising and model training

Customer photos are not authorised for a public gallery, advertising or public model training simply because a preview was created. Separate permission is required for those uses.

Storage location

The final data-residency and cross-border-processing statement is still under launch review. Infrastructure location hints or development configuration are not presented here as a guarantee about where every processing operation occurs.

Questions or requests

Privacy questions and eligible access, correction or deletion requests may be sent toprivacy@momentgrid.shop. General product enquiries may be sent to support@momentgrid.shop.

Launch status

This page describes the Current privacy boundary that is already locked — local-first preview, consent before upload, no permanent raw-photo storage by default and no public reuse without separate permission. Final retention, data-residency and legal wording remain gated until their owning decisions are approved.