Privacy Policy

Canvas & Crown Studio is operated by PF DataStack LLC, a New Jersey limited liability company. This policy describes what we collect, why, how long we keep it, and what rights you have over it.

What we collect

The photo you upload, your pet's name, and your email address. If you check out, also your shipping address and phone number (collected by Stripe during checkout) and your payment details — handled entirely by Stripe; we never see or store your card number. When you approve a design, we also record the IP address and browser used at that moment, solely as evidence of what was approved in case of a payment dispute.

What we don't collect

We don't run any analytics, tracking pixels, or advertising cookies on this site — there is nothing here to opt out of. Any cookie you might see comes from Stripe's own checkout page, not from us.

How we use it

To generate your portrait (your photo and pet's name are sent to Google's Gemini API for that purpose only), to print and ship your order (Printify), to process payment (Stripe), and to email you about your order (Resend) — order confirmations, shipping/tracking updates, and, if something goes wrong with fulfillment, a notice about that.

Who we share it with

Only the services above, each receiving only what it needs to do its part: Stripe (payment), Printify (printing and shipping), Google's Gemini API (portrait generation), and Resend (transactional email). We don't sell your data, and we don't share your photo, your pet's name, or your email with anyone for marketing purposes.

How long we keep it

Your uploaded photo, generated portrait, proof image, and print file are automatically and permanently deleted from our systems 90 days after your order is delivered (or refunded). If you upload a photo but never complete a purchase, it's deleted after 30 days of inactivity. Your order record itself (email, pet's name, order status, shipping details, and amount paid) is retained longer, as needed for accounting, tax, and legal record-keeping — but the actual photo and image files are gone on the schedule above regardless.

Want your photo deleted sooner than that? Email us and we'll remove it manually, provided your order (if any) has already been delivered or refunded.

Security

Data is encrypted in transit (HTTPS) between your browser and our servers. Payment information never touches our servers at all — Stripe's checkout page collects it directly.

Your rights

You can ask us what data we hold about you, or ask us to delete it (subject to the order-record retention above), at any time by emailing us.

Children's privacy

This site isn't directed at children, and we don't knowingly collect information from anyone under 13.

Changes

We may update this policy from time to time; the effective date above will change when we do.

Contact

Questions? Reach us at [email protected].