Privacy policy

1. Who is responsible

The data controller is SOLO VENTURES S.R.L., Romania, reachable at [email protected].

2. What we collect and why

Your pet photo

Needed to create the portrait. It is analysed by an AI model to describe the animal, sent to an image generation model to produce the portraits, and used to check each result against the original. Legal basis: performance of the contract.

Your email address

Used to send your order confirmation, the download links and, if an order fails, the refund notice. If you tick the box asking to hear when framed prints launch, we store that choice with your payment record and send one email when it happens. Legal basis: performance of the contract, and your consent for the launch notice.

Order and payment data

Chosen styles, frame size, price paid, and the payment reference from our payment provider. We never receive your card number. Legal basis: performance of the contract and our legal obligation to keep accounting records.

Technical data

Our servers log the IP address and basic request details of visits for security, abuse prevention and rate limiting. Legal basis: our legitimate interest in running the service safely.

We do not use analytics or advertising cookies. The order flow stores your draft in your browser’s session storage, which is cleared when you close the tab and never leaves your device.

3. Who processes it for us

We use a small number of service providers, each bound by a data processing agreement, and only for the purpose listed:

• Stripe for payment and refunds. Stripe is an independent controller for the payment itself.
• fal.ai to run the image generation model that paints the portrait from your photo.
• Anthropic to describe the animal in your photo and to check the finished portrait against it.
• Cloudflare to store photos and finished files, served through time-limited private links.
• Supabase for the order database and Vercel for hosting the site.
• Inngest to run the generation jobs and Resend to send email.

Some of these providers process data in the United States. Where they do, transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. None of them may use your photo or portraits to train their models under the terms we have with them, and we do not train models on them either. We do not sell data, and we do not share it with anyone else unless the law requires it.

4. How long we keep it

• Original photo: deleted within 48 hours of upload. If no order is placed, it is deleted on the same schedule.
• Generated portraits and previews: deleted 7 days after delivery, when the download links expire.
• Order record (email, styles, size, price, payment reference): kept for as long as tax and accounting law requires, then deleted.
• Print-launch opt-in: kept until you untick it on the results page or ask us to remove it.
• Server logs: kept for a short rolling period, typically under 30 days.

5. Your rights

You can ask us for a copy of the data we hold about you, ask us to correct or delete it, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. Email [email protected] from the address you ordered with and we will respond within a month. You also have the right to complain to the data protection authority in your country.

6. Children

The service is for adults. We do not knowingly collect data from anyone under 18. If you think a minor has ordered, contact us and we will delete the data.

7. Changes

If we change this policy, the date at the top of the page changes with it. Material changes that affect an open order are sent to the order email.