Privacy Policy

1.1 Information You Provide

• Account information: When you register, we collect your name, email address, and password (hashed).
• Photos: You upload photographs to create Cartoon Portraits. These are stored temporarily in Cloudflare R2.
• Order details: When you purchase digital downloads or physical merchandise, we collect your shipping address and payment confirmation. Payment card details are handled entirely by Stripe and never stored on our servers.

1.2 Information Collected Automatically

• Usage data: We collect basic analytics (pages visited, features used, referral source) to improve the Service.
• Device & browser data: IP address, browser type, operating system, and device type for security and diagnostics.
• Cookies: We use essential cookies for authentication and session management. We do not use third-party tracking cookies.

• Provide, maintain, and improve the Service
• Generate AI Cartoon Portraits from your uploaded photos
• Process payments and fulfill orders
• Send transactional emails (order confirmation, shipping updates, password resets)
• Respond to customer support inquiries
• Detect, prevent, and address fraud, abuse, or security incidents

We do not sell your personal information. We may share data with trusted third-party service providers strictly necessary to operate the Service:

• Stripe — payment processing (never see your full card number)
• Cloudflare R2 — image storage
• Printful — printing and shipping physical merchandise (receives your shipping address and Cartoon Portrait)
• Resend — transactional email delivery
• Neon (Postgres) — database hosting
• Fal.ai — AI inference (receives your uploaded photo temporarily to generate the Cartoon Portrait)
• Vercel — hosting and deployment

We may also disclose information if required by law, valid legal process, or to protect our rights and the safety of others.

Uploaded photos: Original photos are automatically deleted from our servers 30 days after the order is created. Generated Cartoon Portraits are retained as part of your order record.

Account data: Account information is retained for as long as your account is active. You may request account deletion at any time by contacting us. We will delete your account and associated data within 30 days, subject to legal retention requirements for financial records (typically 7 years for payment transactions).

Order records: Order data may be retained for business and legal compliance purposes.

We implement industry-standard security measures, including TLS encryption for all data in transit, encryption at rest for stored images, and hashed passwords. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate data.
• Right to deletion: Request deletion of your personal data (subject to legal obligations).
• Right to restrict processing: Limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to opt out of sale: We do not sell your personal information. You have the right to opt out of any future sale.

To exercise any of these rights, contact us at orders@tooncustoms.com. We will respond within 30 days.

The Service may contain links to external sites (Stripe, Printful, etc.). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

We use only essential cookies required for authentication (Better Auth session tokens) and basic functionality. We do not use advertising cookies, tracking pixels, or social media widgets. You may disable cookies in your browser settings, but this may affect your ability to log in and use the Service.

We may update this Privacy Policy from time to time. Material changes will be notified via email (if you have an account) or through a notice on the website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at orders@tooncustoms.com.