Legal

Privacy Policy

Last updated: August 31, 2026

CaravanStone ("CaravanStone," "we," "us," or "our") operates TurquoiseStone, a desktop publishing-workflow application that integrates with Adobe InDesign, together with its accompanying customer account portal (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

We collect the following categories of information in connection with the Service:

• Account information — such as your name and email address, used to create and manage your CaravanStone account.
• Company and membership information — such as the company or workspace you belong to, your role, and membership status within that company.
• Invitation information — such as the email address of a person you invite to join your company, used to deliver and manage that invitation.
• Subscription and licensing information — such as your company's subscription status and seat assignment, used to determine access to the Service.
• Technical and operational information — such as device, application version, log information, and records of certain account and security-related actions, reasonably required to operate, secure, and troubleshoot the Service.
• Content you provide — such as text and other material you enter into the product in the course of using its publishing features.

2. How We Use Information

We use the information described above to:

• Provide, maintain, and operate the Service, including account, company, and membership management;
• Determine and validate product entitlement (confirming that your account and company are authorized to access the Service);
• Communicate with you about your account or the Service;
• Maintain the security, integrity, and reliability of the Service; and
• Comply with legal obligations and enforce our agreements.

3. Payment Processing

Subscriptions to TurquoiseStone are sold and billed through FastSpring, our commerce and payments provider. FastSpring acts as merchant of record for these transactions. CaravanStone does not receive or store your full credit or debit card number; payment processing is handled directly by FastSpring in accordance with FastSpring's own privacy policy and terms.

4. Adobe InDesign Integration

TurquoiseStone includes a plugin that runs within Adobe InDesign. Your use of Adobe InDesign itself is governed by Adobe's own terms and privacy practices, which are separate from this Policy. CaravanStone's plugin interacts with InDesign only to the extent necessary to provide the Service's publishing features.

5. AI-Assisted Features

TurquoiseStone includes optional features that let you connect your own account with a supported third-party AI provider (such as Anthropic or OpenAI) to help generate or adjust content. These include separate capabilities for text generation and image generation, which may use different providers. These features are optional. You choose whether to use these features and connect your own account credentials for the applicable supported provider. If you use an AI-assisted feature, the content you submit through that feature is transmitted directly from the application on your device to the applicable AI provider for that feature, for processing. CaravanStone does not receive or store your AI provider credentials on its servers; they are stored locally on your device. Processing performed by an AI provider is subject to that provider's own terms and privacy practices, separate from this Policy. CaravanStone does not purchase, own, or operate any AI provider's service, and the providers supported by TurquoiseStone may change over time.

6. Cookies and Similar Technologies

CaravanStone websites and applications may use cookies, local storage, or similar technologies where necessary for authentication, security, your preferences, and the general operation of the Service. We do not currently use these technologies for advertising or analytics purposes.

7. Third-Party Service Providers

We rely on a limited number of service providers — including FastSpring for commerce and payments, infrastructure and hosting providers necessary to operate the Service, and, where you choose to connect one, a third-party AI provider you select for an AI-assisted feature (such as Anthropic or OpenAI) — to help deliver the Service. We do not sell your personal information.

8. Data Retention

We retain account, company, and subscription information for as long as reasonably necessary to provide the Service, support your account, and meet legitimate business, security, and legal requirements. We have not finalized a fixed retention schedule. If you would like information deleted, contact us and we will address your request; however, we may need to retain certain information where legitimately required for legal, security, fraud-prevention, accounting, dispute-resolution, or recordkeeping purposes.

9. Security

We use reasonable technical and organizational measures designed to protect information, including transmitting data over encrypted connections where applicable. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Choices and Rights

Depending on your location, you may have rights to access, correct, or request deletion of your personal information. To make such a request, or with any privacy question, contact us at the address below.

11. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do.

13. Contact Us

Questions about this Privacy Policy or your information can be sent to [email protected].