Privacy policy

Who we are

[Company legal name], [business address], runs Piclara and is responsible for your information. Contact: [privacy email].

What we collect

• Your photos and the portraits made from them.
• Your email address, if you sign in or order.
• Order details: what you bought, your shipping name, address and optional phone number, and the payment status. Card details go straight to Stripe and never reach us.
• Messages you send us.
• Technical data needed to run the site securely: your IP address, browser type and request logs.
• Site usage, such as which pages you visit, including session replays made with Microsoft Clarity, but only if you accept analytics in the cookie banner.

How we use it

To make your previews, print and deliver your order, send you emails about your sign-in and your order, answer your questions, prevent fraud and abuse, and improve the site. We send marketing emails only if you sign up for them. We never sell your information, and we never use your photos or portraits to train AI models.

Who we share it with

Only the companies we need to run Piclara, and only what each one needs:

• Google (Gemini API) receives your photo to create the portraits. We use Google's paid service, under which Google says it does not use your content to improve its products and keeps it only briefly to detect abuse.
• Stripe processes your payment.
• Printful prints and ships your canvas. It receives the print file, your name, shipping address and email.
• Cloudflare hosts the site, stores images, and runs the security check that stops bots.
• Microsoft Clarity records how visitors use the site (pages visited, clicks and session replays), only after analytics consent.
• Neon hosts our database.
• Resend sends our emails.

We may also share information when the law requires it, or with a buyer if the business is sold, under the same protections.

How long we keep it

• Photos and previews you don't order: deleted 30 days after upload.
• Photos and portraits in an order: deleted 30 days after delivery, so we can reprint if something goes wrong.
• Order records: kept as long as tax and accounting law requires, [typically 7 years].
• Sign-in codes: never stored readable, and they expire after 10 minutes.
• Your account: kept until you ask us to delete it.

Your rights and choices

You can ask to see, correct or delete your information. Depending on where you live, state law may give you more rights, such as getting a copy of your data. We answer requests within [30] days and may ask you to confirm your email first. We never treat you differently for using these rights.

Analytics run only after you accept them, and you can change that anytime from Your Privacy Choices in the footer. To delete your account, projects and images:

Cookies

We use only the cookies needed to run the site, plus analytics if you accept them. There are no advertising cookies. Details are in the cookie policy.

Children

Piclara is not meant for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Where your data is stored

Piclara is a US business, and your information is processed in the United States by us and the companies listed above.

Security

Photos are kept in private storage that is never publicly listed, connections are encrypted, and access is limited to the people and services that need it. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Changes

If we change this policy we post the new version here with a new date, and email you about important changes.

Last updated: [date].