Privacy Policy
Last updated: April 14, 2025 · Effective: April 14, 2025
1. Who We Are
PetPortraitGenerator (“we,” “us,” “our”) is an AI-powered pet portrait generation service operated by Michael Miller. Our website is located at pet-portrait-generator.com. For privacy-related enquiries, contact us at [email protected].
2. Information We Collect
2.1 Account Information
When you create an account via Google OAuth, we receive your name, email address, and Google profile picture as provided by Google. We do not store passwords. Authentication is handled entirely by Google.
2.2 Pet Photos You Upload
Photos you upload for portrait generation are stored in private, encrypted cloud storage (Supabase). They are never publicly accessible and are only accessible to you via time-limited signed URLs. We do not share these photos with third parties, and we do not use them to train AI models.
2.3 Generated Portraits
AI-generated portraits created from your uploaded photos are stored in your private account storage, accessible only to you.
2.4 Usage and Transaction Data
We collect generation history, credit transaction records, and technical logs (error messages, timestamps) necessary to operate the service, prevent abuse, and provide support.
2.5 Payment Information
Payment processing is handled by Stripe, a PCI-DSS-compliant third-party provider. We do not store your full card number, CVV, or sensitive payment data on our servers. We only receive transaction confirmations and billing details from Stripe.
2.6 Technical Data
We may collect basic analytics data such as browser type, device type, and page visits to improve our service. This data is anonymized and not linked to your personal identity.
3. How We Use Your Information
- To provide and operate the pet portrait generation service
- To manage your account, credit balance, and generation history
- To process payments and issue refunds
- To send transactional emails (account confirmation, credit notices, support responses)
- To detect and prevent fraud, abuse, and security incidents
- To improve service quality and reliability
- To comply with legal obligations
We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
- Contract performance: Processing necessary to provide the service you requested (account management, portrait generation, credits).
- Legitimate interests: Security monitoring, fraud prevention, and service improvement, where these do not override your rights.
- Legal obligation: Where we are required to retain certain records by applicable law.
- Consent: For any optional communications (marketing emails). You may withdraw consent at any time.
5. Third-Party Service Providers
We share minimal data with trusted third-party providers solely to operate the service:
Stores account data, generation records, and image files. Infrastructure located in the US and EU. Supabase Privacy Policy
Your uploaded image is sent to the Google Gemini API to generate the portrait. Google processes the image for this purpose and does not retain it for model training under our API agreement. Google Privacy Policy
Used for account sign-in. We receive your name, email, and profile picture from your Google account.
Handles all payment processing. PCI-DSS Level 1 certified. Stripe Privacy Policy
Website hosting, DDoS protection, and global content delivery. Cloudflare Privacy Policy
6. Data Retention
- Account data and generation history are retained for as long as your account is active.
- Uploaded pet photos and generated portraits are retained until you delete them or delete your account.
- Transaction records may be retained for up to 7 years as required for tax and accounting compliance.
- Upon account deletion, all personal data is permanently deleted within 30 days, except where retention is required by law.
7. International Data Transfers
Your data may be processed in the United States and other countries where our service providers operate. Where required by law (e.g., GDPR for EEA users), we rely on standard contractual clauses and other appropriate safeguards to protect your data during international transfers.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Correct inaccurate or incomplete personal data.
Request deletion of your personal data ("right to be forgotten").
Receive your data in a machine-readable format.
Request that we limit processing of your data.
Object to processing based on legitimate interests.
California residents may opt out of the sale of personal information (we do not sell personal information).
Withdraw consent for optional processing at any time without affecting prior lawful processing.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. EEA users may also lodge a complaint with their local data protection authority.
9. Cookies
We use only essential cookies required for authentication (session tokens). We do not use advertising, tracking, or analytics cookies. No cookie consent banner is required for strictly necessary cookies under GDPR.
10. Children's Privacy
Our service is not directed to children under 13 years of age (or 16 in certain EEA jurisdictions). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
11. Security
We implement industry-standard technical and organizational measures to protect your personal data, including TLS encryption in transit, AES-256 encryption at rest, access controls limited to necessary personnel, and regular security reviews. No system is 100% secure; if you discover a security issue, please report it to [email protected].
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by updating the “Last updated” date at the top of this page. Continued use of the service after changes constitute acceptance of the updated policy.
13. Contact & Data Controller
For any privacy-related requests, questions, or complaints:
Email: [email protected]
Website: pet-portrait-generator.com