How Pawnted uses your data

This Privacy Policy explains how Pawnted collects, uses, stores, and shares personal data when you use our website, upload photographs, generate portraits, place orders, contact us, or interact with our marketing and analytics tools.

This policy is intended to reflect how the product currently works. It covers uploaded source photos, generated portraits, order and contact information, analytics data, and the AI-assisted checks we use to process images and improve output quality.

For the purposes of data protection law, Pawnted is the controller of the personal data described in this policy.

If you have questions about this policy or want to exercise your privacy rights, you can contact us at info@pawnted.com.

Depending on how you use Pawnted, we may collect the following categories of data:

• Uploaded content: source photographs, reference images, portrait names or labels, feedback you provide about a generated portrait, and regenerated or edited outputs.
• Generated content: completed portraits, previews, print assets, mockups, and related image metadata.
• Contact and order data: name, email address, phone number, shipping address, billing details you provide, and customer support messages.
• Transaction data: order contents, prices, payment status, fulfillment status, shipping selections, and order identifiers.
• Usage and device data: IP-derived country or region, browser activity on our site, anonymous session identifiers, cookies, local or session storage values, event data, and referral identifiers such as fbclid.
• Marketing data: email capture events, unsubscribe status, Meta Pixel events, and conversion event data where enabled.

Uploaded images may contain personal data about you or other people, including faces, family members, children, or old photographs. Please make sure you have the right to provide any image you upload to us.

We use personal data to:

• create, preview, edit, and regenerate portraits from your uploaded images;
• check source images for suitability, subject count, and quality before generation;
• review generated images for quality control and support revision requests;
• prepare print-ready files, mockups, and fulfillment assets;
• process payments, fulfill orders, and provide shipping updates;
• send service emails, preview emails, order emails, and customer support responses;
• measure conversion, diagnose issues, protect against misuse, and improve the product;
• comply with legal obligations, accounting, tax, fraud-prevention, and dispute-handling requirements.

Pawnted uses third-party AI services as processors to help us generate portraits and run supporting quality and orchestration checks.

• We send uploaded images and prompt instructions to OpenAI's API to generate or edit portraits.
• We use Google's Gemini services to analyze uploaded images, validate source-photo suitability, check generated outputs, and help interpret revision feedback.
• These checks may involve automated review of both your original source images and generated portraits so that we can determine whether the inputs are suitable, whether the output preserved the intended subjects, and whether a revision request needs clarification before regeneration.

We do not rely on these systems to make legal or similarly significant decisions about you. We use them to operate the portrait-generation service you requested and to improve the accuracy and usefulness of that service.

Where UK GDPR or EU GDPR applies, we generally rely on the following lawful bases:

• Contract: to generate portraits, process payments, fulfill orders, and provide customer support relating to an order or preview.
• Legitimate interests: to improve portrait quality, prevent misuse, measure site and campaign performance, keep records, and operate the business efficiently.
• Consent: where required for certain marketing communications or non-essential tracking.
• Legal obligation: where we must keep records, respond to lawful requests, or comply with tax, accounting, consumer, or fraud-prevention requirements.

We share personal data only where needed to run Pawnted. Our processors and service providers may include:

• Supabase for database and file storage;
• OpenAI for portrait generation and editing;
• Google / Gemini for image analysis, validation, and revision-planning support;
• Stripe and PayPal for payment processing;
• Printify for print fulfillment and shipping-related production workflows;
• Resend for transactional and service email delivery;
• Meta for pixel, conversions, and advertising measurement where enabled.

We may also disclose data where required by law, to protect our rights, to investigate fraud or abuse, or as part of a business transfer.

Some of our service providers may process data outside your country, including outside the UK or EEA. Where required, we rely on appropriate safeguards such as contractual protections or other lawful transfer mechanisms made available by those providers.

We keep personal data for as long as reasonably necessary for the purposes described in this policy, including to provide your portraits, fulfill orders, respond to support requests, maintain business records, and handle disputes or refunds.

• Uploaded images, generated portraits, previews, and print assets may remain stored until they are deleted by us, replaced, or no longer needed for operational or support purposes.
• Order and payment-related records may be retained for longer where needed for accounting, tax, fraud, or legal compliance.
• Marketing suppression records, such as unsubscribe data, may be retained so that we can honor future opt-out requests.

If you want us to review a specific deletion request, contact info@pawnted.com.

We use cookies and similar technologies to keep sessions working, remember certain preferences, attribute traffic sources, measure funnel performance, and improve the service.

This includes anonymous session identifiers, local or session storage values used for cart and preview behavior, and analytics or advertising data such as Meta Pixel and conversion events where enabled.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent where consent is the basis we rely on.

To make a request, email info@pawnted.com. We may need to verify your identity before completing certain requests.

If you are in the UK, you can also complain to the Information Commissioner's Office (ICO) if you are unhappy with how your data has been handled.

Pawnted is not directed at children. If you upload an image containing another person, including a child, you are responsible for making sure you are allowed to provide that image to us for portrait creation.

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the last updated date above.