Privacy Policy

Who We Are

PortraitCreation is operated by Edulis SRL, a company registered in Romania (CUI 51749380), with registered address at Strada Principală 380A, Sângeorgiu de Mureș, Mureș, Romania. For any data-related enquiries, please contact us at privacy@portraitcreation.com.

What Data We Collect

We collect the following personal data when you use our service:

• Email address — for account creation, authentication, and transactional emails
• Pet photos — uploaded by you for portrait generation
• Pet names — provided by you to personalise your portraits
• Payment information — processed securely by Stripe; we never store your card details
• Device and browser metadata — collected automatically for security and service improvement
• Session tokens — to keep you signed in
• Shipping details — name and delivery address, provided when you order a physical print

How We Use Your Data

We use your personal data to:

• Generate AI pet portraits based on the photos you upload
• Process payments for digital and physical products
• Send transactional emails including OTP codes, download links, and order confirmations
• Improve our service, troubleshoot issues, and prevent fraud
• Fulfil physical print orders — your shipping details and portrait file are sent to our print-on-demand partner for production and delivery

Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Contract performance — to provide the portrait generation service you have requested
• Consent — for any marketing communications (you can withdraw consent at any time)
• Legitimate interest — for security, fraud prevention, and service improvement

Third-Party Processors

We share your data with the following third-party service providers who process data on our behalf:

• Stripe — payment processing
• Google (Gemini) — AI portrait generation
• Replicate — image upscaling
• Vercel — hosting and image storage
• Resend — transactional email delivery
• Upstash — caching and background job processing
• Neon — database hosting
• Gelato — print-on-demand fulfilment and shipping (your name, delivery address, and portrait file are shared with Gelato and their local print partners to produce and ship your order)

Data Retention

We retain your data as follows:

• Account data — retained while your account is active and for a reasonable period thereafter
• Generated images — retained according to our retention schedule; you may request deletion at any time
• Payment records — retained as required by applicable tax and accounting laws
• Shipping data — retained for the duration required to fulfil your order and as required by applicable tax and accounting laws

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate personal data
• Right to erasure — request deletion of your personal data
• Right to restriction — request that we limit processing of your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent for marketing communications at any time
• Right to lodge a complaint — file a complaint with your local data protection supervisory authority

To exercise any of these rights, please contact us at privacy@portraitcreation.com.

International Data Transfers

Some of our third-party processors operate outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions adopted by the European Commission.

Cookies

We use essential session cookies to keep you authenticated. We do not use third-party tracking cookies or advertising cookies.

Children's Privacy

Our service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email or by posting a notice on our website. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at privacy@portraitcreation.com.