Privacy

We keep this small. When you buy, Stripe's checkout collects your name, email and shipping address and passes them to us so we can fulfil the order. Your card number never touches our servers — Stripe holds it.

If you make a character, we keep the text you choose and the images it produces, so we can show them to you and print the one you buy. A cookie holds an anonymous session id that counts your studio runs; it identifies a browser, not a person.

If you create an account, we keep your email and your order history so you can see your own orders and renders.

Each service does one job, and only sees what that job needs:

• Stripe — payment. Card details, billing and shipping address.
• Prodigi and Printful — print and apparel fulfilment. Your name, shipping address, email and the artwork file.
• OpenAI — draws your character from your answers and, if you add one, your photograph, and screens requests for prohibited content.
• Claid — enlarges the artwork file to print resolution. Image only, no personal details.
• Resend — sends order emails to the address you gave at checkout.
• Vercel — hosts the site and stores artwork images.
• Supabase — account sign-in, order records, and the anonymous studio-pass counters.
• Google (Analytics and Ads), Meta, TikTok, Pinterest and Reddit — analytics and ad measurement, and only if you choose “Accept all” in the cookie banner. They see which pages you visit and whether you bought, never your card. Reject, or send Global Privacy Control, and none of them load.

We do not sell or rent your data to anyone. Advertising cookies set after you accept can count as "sharing" under some U.S. state laws; you can refuse them on Privacy Choices or with a Global Privacy Control signal. The full list is in the Cookie Policy.

If you bring a photograph to the studio, it is sent to OpenAI with your answers to draw the render you asked for. We do not store the photograph, we do not measure your face or build a face template, and we do not use it to identify you or anyone else. OpenAI processes it under its API terms, which say API data is not used to train its models and may be kept for up to 30 days to detect abuse.

The drawings made from it are kept like any other render (see below) and you can ask us to delete them. Only upload a photograph of yourself, or of an adult who has agreed, and never of a child.

Emailed download links stay live for 30 days; links in your account are minted fresh each visit and last an hour. Studio renders stay visible in your account for one year; after that they are hidden, and we do not yet delete them automatically, so ask and we will. Order records we keep as long as bookkeeping, tax and dispute handling require.

This site is not meant for children, and we do not knowingly collect information from anyone under 16. If you think a child has given us their details, write support@painted.app and we will delete them.

To see, correct or delete what we hold about you, or to close your account, write support@painted.app from the address you signed in with. We delete the account and its renders; order records we must keep for tax are kept and used for nothing else. That inbox is read by the people who run the shop, and it is the same address for every privacy question this page doesn't answer.

Residents of California and other U.S. states with privacy laws can opt out of sale or sharing on Privacy Choices, and a Global Privacy Control signal is honoured automatically. We never charge for a request and never treat you differently for making one.

PaintedApp, LLC, 1327 SE Tacoma St #394, Portland, OR 97202.

24 September 2026: operator and mailing address named; studio counters listed under Supabase, where they live; photographs and likeness section added; every tag the site can load is named; retention, children and account deletion added.