Esta página está disponible solo en inglés. La versión en inglés es la que rige.
Privacy
Last updated
The short version. Your photographs exist to make your portrait. We send them to an AI company in the United States, which uses them to make the picture and does not keep them to train on. We keep your photos and portraits for 30 days so you can download them, or until you press "Delete my photos now", whichever comes first. We never sell them, never use them to train AI, and never show them to anyone unless you share them. We do not see or store your card number.
Pawraits is run by a small team. For anything about your data, write to service@pawraits.com.
What we collect
Photographs
The pictures you upload of yourself, other people and your pets are the product. On upload we strip all metadata (location, camera details) and resize them to at most 1536 px. You must have permission from every adult in them; photos of children only with their parent or guardian. From them we make watermarked previews, the full-resolution portrait you buy, re-rolls, and any share card you create.
Your email address
We ask for it when you request previews so we can tell you when they are ready and find your order later; after your first purchase it is your account name. If you made previews but did not buy, we may send up to three reminders over the following days, each with a one-click unsubscribe. We do not send newsletters. If you send a gift we also hold the recipient's name and email, only to deliver it.
Payment details
Stripe takes the payment. We receive the confirmation, the amount, the billing country and the last four digits of the card, never the full number.
Things we deliberately do not keep
Photo metadata is removed on upload. IP addresses used for rate limiting are hashed. The clean, unwatermarked master behind a preview is never shown or downloadable by anyone until you buy it. Usage data (pages viewed, which steps you completed, the campaign that brought you here) is tied to a random visitor id, not to your name.
Who else sees your data
We are a small operation and we use other companies to do the parts we do not run ourselves. Each one only receives what it needs. They are in the United States, so if you are in the UK or the EU your data is processed in the United States; we rely on the standard contractual clauses those companies publish.
| Company | What they get | Why |
|---|---|---|
| Vercel Inc. | All requests (IP address, user agent, pages), temporary processing of uploads and generated images | Hosting, edge network, serverless functions and cron |
| Supabase Inc. | Email, guest/visitor ids, order and gift records, uploaded photos, previews and purchased portraits | Database, authentication (magic links) and private file storage |
| Stripe, Inc. | Email, card details (entered directly on Stripe, never seen by us), billing country, amount, IP address | Payment processing, receipts, tax and fraud screening |
| Resend, Inc. | Recipient email, email subject and body (which may include your name, gift message and download links) | Transactional email delivery (order, preview-ready, gift and deletion emails) |
| Google LLC (Gemini API, paid tier) | Your uploaded photos (metadata stripped) and our style prompt; no email or name is sent | AI image generation (previews, re-rolls and full-resolution rendering) |
| fal.ai (Features & Labels, Inc.) | Your uploaded photos (metadata stripped) and our style prompt | Alternative / fallback AI image generation and upscaling |
| Cloudflare, Inc. (Turnstile) | IP address, browser characteristics, challenge token | Bot and abuse protection on the upload and generate steps |
| Meta Platforms, Inc. (Pixel and Conversions API) | Hashed email, event names (page view, lead, purchase value), click ids, IP address and user agent | Ad measurement and optimisation, only with your marketing-cookie consent |
| Functional Software, Inc. (Sentry) | Technical error reports (request path, stack trace, truncated ids); no photos | Error monitoring |
What nobody does with your photos
Nobody sells them. Nobody uses them for advertising. Nobody trains an AI model on them, including the companies above, under the terms we use. Nobody publishes them: a portrait is visible only to the people you give the link to, and only you can put one in the gallery.
How long we keep things
| What | How long |
|---|---|
| Photographs, previews, portraits, share images | 30 days from upload, or until you press "Delete my photos now" |
| Order records (email, items, amounts, Stripe ids) | 7 years, because tax law says so; no photos in them |
| Email bodies in our sending queue | 7 days; gift messages are purged with them |
| Usage events with the random visitor id | 13 months |
| Your account (email) | Until you ask us to delete it |
| Support messages | 2 years |
What you can ask for
You can delete your photos and portraits yourself, instantly, with the "Delete my photos now" button on your order page. For a copy of your data, a correction, or deletion of everything including your account, email service@pawraits.com from the address you used with us. We answer within 30 days, usually much sooner. Wherever you live, if a law gives you more than this, that law wins.
Children
Pawraits is for adults. Do not upload a photo of a child unless you are their parent or guardian; we will delete any we find otherwise.
Changes
When this policy changes we update the date at the top; for anything material we email customers with open orders first. Questions, or something we got wrong: service@pawraits.com.
See also the Terms.