Privacy policy

Who we are

Wallkind & Co. paints your photos into artworks and prints them to order. Wallkind & Co., [address placeholder], is responsible for your data. Contact us at support@wallkind.co.

What we collect

• Your photos, to paint your artworks.
• The artworks we paint from them, so you can see, keep and order them.
• Your email, only if you give it: to unlock more previews, save your studio, sign in or order.
• Your delivery details (name, address, optional phone) when you order.
• A random guest ID in a cookie, so your studio and cart stay with your browser without an account.
• Technical data such as your IP address, used by our bot check and in short-lived server logs.

Payments are handled by our payment provider; we never see your card number.

How we use it

• To paint your artworks, show them in My Studio and keep your cart.
• To print and ship your order, and to email you about it (confirmation, shipping, delays).
• To send the link back to your studio when you ask for it.
• To keep the site safe from bots and abuse.
• Marketing emails only if you agreed to them; every one has a one-click unsubscribe that stops all marketing. [We don’t send marketing yet.]

AI and your photos

Your artwork is painted from your photo with AI (Google’s Gemini API), and you see and approve it before anything is printed. We use Gemini on Google’s paid tier, whose terms say your photos and prompts aren’t used to improve Google’s products. We never use your photos to train AI.

Google keeps requests for a limited time to detect abuse, under its own terms. [Lawyer: confirm the wording and period from the current Gemini API terms.]

How long we keep it

• Photos: deleted after 30 days, or straight away when you delete them in My Studio.
• Artworks you didn’t order: deleted after 90 days, or when you delete them.
• Emails you gave us without ordering (previews, waitlist, unfinished checkouts): deleted when you unsubscribe or after 2 years without activity.
• Orders (your details, the artworks and print files): kept 7 years for accounting, then deleted.
• When you unsubscribe we keep only a one-way hash of your email, so we don’t write to you again.

Who we share it with

Only the services that run the site for us, each for its part:

• Google (Gemini API): painting the artworks.
• Supabase: database and file storage.
• Vercel: hosting.
• Cloudflare (Turnstile): bot check.
• Fal.ai: sharpening an artwork for print, only when a size needs it.
• MerchOne: printing and shipping your order (your delivery details and the print file).
• Whop: payments.
• Resend: sending our emails.

We don’t sell your data. [Lawyer: data locations, international transfers and safeguards.]

Cookies

• Guest ID (essential, 1 year): keeps your studio and cart.
• Sign-in cookies (essential), only if you sign in.
• Bot check (Cloudflare Turnstile), on upload and preview.

No advertising or analytics cookies. [Update if analytics are added.]

Your choices and rights

You can delete your photos and artworks yourself in My Studio. To see, correct or delete anything else, email us. [Lawyer: rights under GDPR / UK GDPR / CCPA as applicable, response times, and how to complain to a regulator.]

Our service isn’t meant for children to use on their own. If you upload photos of children, you must be their parent or guardian or have their permission. [Lawyer: minimum age.]

Changes

If we change this policy in a way that matters, we’ll say so on this page and, where needed, by email.