Privacy policy

You trust us with photos of the people and pets you love. This page explains what we do with them and with the rest of your data, in plain words. The short version: we use your data only to make and deliver your portraits, we delete unpaid projects after 30 days, we never sell your data, and we don't use your photos to train AI.

Who is responsible

Računalniško programiranje, Tomaž Ovsenjak s.p., Mlajtinci 15, 9226 Moravske Toplice, Slovenia ("we") is responsible for your data. Questions or requests: [email protected].

What we collect, and why

• Your photos of people and pets, and the portraits we make from them (watermarked previews and full-size files). We need them to make and deliver your portraits.
• An automatic photo check. Before making anything, an AI looks at each photo and records a short description, such as "one person, face clearly visible" or "one dog, too blurry", so we can tell you early if a photo won't work. It doesn't identify who anyone is.
• Your email address, if you give it: to send you your previews link, your receipt and your download link, and to resend your links if you lose them. We only send you news and offers if you ticked the box for that, and you can unsubscribe at any time.
• Gift details: the recipient's name and email, your name and your note, so we can deliver the gift.
• Order details: what you bought, the price, when, and your agreement to our terms and to immediate delivery.
• Payment details are entered on Stripe's checkout page. We never see or store your card number.
• Technical data: to stop the free previews being abused, we keep a scrambled (hashed) version of your IP address, which can't be turned back into the address, and we use Cloudflare Turnstile to check that a person, not a bot, is asking.

Legal bases (GDPR): making and delivering what you asked for (Art. 6(1)(b)); keeping records the law requires (Art. 6(1)(c)); preventing abuse and keeping the service secure, which is our legitimate interest (Art. 6(1)(f)); and your consent for marketing emails (Art. 6(1)(a)), which you can withdraw at any time.

Photos of children and other people

Please only upload photos of other people, including children, if you're allowed to: for a child, you should be their parent or guardian or have their permission. We use these photos for nothing except making the portraits you asked for.

AI, training and selling

We don't use your photos or portraits to train AI models, we don't sell or rent your data, and we don't use your portraits in our marketing without asking you first.

Who helps us

These companies process data for us, only to provide the service:

• Hetzner Online GmbH, Germany: our server and database.
• Cloudflare, Inc. (USA): storage for photos and portraits, image delivery, and bot protection.
• fal.ai (Features & Labels, Inc., USA), running OpenAI's image model: creates your portraits.
• Anthropic, PBC (USA): the automatic photo check.
• Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA): payments.
• Resend, Inc. (USA): sends our emails.

Some of these companies are in the USA. Transfers there are protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

• Projects you don't buy from: deleted automatically 30 days after you start them, including the photos, previews, photo check results and your email address.
• Projects you buy from: kept so you can download your portraits again, until you ask us to delete them. Email [email protected] and we'll delete the project, its photos and its portraits.
• Payment records: kept by Stripe and in our bookkeeping for as long as tax law requires.
• Backups of our database are kept for 14 days, so deleted data disappears from them within 14 days.

Cookies and your browser

We don't use advertising or analytics cookies. Our site saves a few small things in your browser, like the looks you picked, so the page remembers them. Stripe and Cloudflare Turnstile may use their own technical cookies to process payments and keep the site safe.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, or to receive it in a portable format, and you can object to how we use it. Email [email protected]. You also have the right to complain to a data protection authority, for example the one in the country where you live.

Changes

If we change this policy, we'll update it here and change the date at the top. See also our terms and refund policy.