Your photo stays private by design.

1. Information we process

We process the photo you choose, a normalized copy with metadata removed, optional pet name, generated preview and master, artwork and generation identifiers, model and prompt version, account email and profile name, authentication records, Portrait Credit activity, and technical security information such as timestamps, request limits, and error categories.

For an order we also process product choice, price, payment and fulfilment status, email, and—only for a physical item—recipient name and delivery address. We do not receive or store full card details; Stripe handles payment information.

2. Why we use it

We use this information to provide the requested preview and account, perform a purchase and delivery, calculate shipping, issue secure downloads, manage credits, answer support requests, prevent abuse, investigate failures, keep accounting records, and comply with legal obligations.

The intended legal bases are performance of a contract or steps you request before a contract, legitimate interests in securing and operating the service, and compliance with legal obligations. Consent is used only where the law specifically requires it. The final controller and adviser must approve this assessment before live processing.

3. Portrait generation and private storage

The server verifies the upload, fixes orientation, removes embedded metadata such as GPS information, and re-encodes it before sending the normalized image and portrait instructions to Google’s Gemini API. The Gemini credential stays server-side. Google applies SynthID to model-generated images.

Sources, watermarked previews, unwatermarked masters, and production files are stored in separate private Supabase buckets. The free-preview page receives only an access-controlled watermarked derivative, not a public URL for the unwatermarked master.

4. Service providers and disclosures

Vercel hosts the application; Supabase provides authentication, database, and private storage; Google provides Gemini image generation; Stripe provides payment and tax tooling; Printful provides shipping quotes and, only after physical fulfilment is enabled, production and delivery; Resend is the planned transactional-email provider.

Each provider receives only information needed for its role. We may also disclose information where legally required, to protect customers and the service, or as part of a properly managed business transfer. We do not sell customer photos or use them for third-party advertising.

5. International transfers

Some providers or their subprocessors may process information outside Sweden or the European Economic Area. Before live launch, ClassicPetArt must complete the processor and data-location inventory and document the applicable adequacy decision, standard contractual clauses, or other lawful transfer safeguard.

We will not claim that providers never retain data or never use it for model improvement until the selected product terms, account settings, contracts, and deletion procedures support that statement.

6. Retention

Unpaid anonymous creation sessions and their source, preview, and master assets expire after seven days. Signed-in gallery artwork is retained until you delete or archive it, request account deletion, or a documented legal or security reason requires limited continued retention. Expiring download links last seven days and can be replaced after order access is verified.

Paid transaction, tax, consent, and order records are separated from optional gallery content and may need to be retained for up to seven years or another period required by applicable accounting, tax, consumer, or dispute law. Data no longer required is deleted or anonymised. The exact operator-specific retention schedule and backup deletion procedure require approval before live sales.

7. Your choices and rights

Signed-in customers can export account, gallery, order, and Portrait Credit data; archive or delete unpurchased portraits; renew eligible paid download links; and request account deletion. Contact hello@classicpetart.com to request access, correction, deletion, restriction, portability, or objection, or to withdraw consent where processing is based on consent.

A request may require identity verification. Some information cannot be deleted immediately when retention is legally required, but it will be restricted to that purpose. You may complain to the competent data-protection authority; in Sweden this is Integritetsskyddsmyndigheten (IMY).

8. Cookies and security

ClassicPetArt uses necessary cookies or equivalent browser storage for authentication, private creation ownership, request recovery, and security. Optional advertising or cross-site tracking is not currently implemented. Any future non-essential tracking must be separately disclosed and, where required, consented to.

Controls include server-side secrets, private storage, short-lived signed access, hashed bearer download tokens, origin checks, rate limits, verified webhooks, metadata stripping, access checks, and scheduled retention. No online service can promise absolute security; suspected incidents are investigated under the incident runbook.

9. Contact and changes

Privacy questions and requests can be sent to hello@classicpetart.com. The full controller identity and postal address must be inserted before public launch. Material changes will be dated and, where required, communicated before they take effect.