Privacy Policy
Last updated: PLACEHOLDER date
Lumtrove ("we", "us") is operated by Chenhao Li, an individual seller.
What we collect
- Your two uploaded images: one of you, one of your pet.
- Order details: your email, order number, and what you ordered.
- Payment details: handled by Dodo Payments. We never see your full card number.
- Basic technical data: IP address and browser info, used for security and abuse prevention.
- Consent record: the time you agreed to our terms and the upload checkbox.
How we use it
- To create your AI-generated portrait and deliver it.
- To email you about your order (order confirmation and delivery).
- To prevent fraud and resolve disputes.
We do not sell your data. We do not use your images for advertising or show them publicly without your separate written permission.
Who processes your data
| Provider | Role |
|---|---|
| TO CONFIRM: image generation provider | Processes your uploaded images to generate the illustration, under terms that do not allow training on them |
| Dodo Payments | Merchant of record; handles payment, tax, and receipts under its own privacy policy |
| Cloudflare (Workers, D1, R2, Turnstile) | Hosts the site, stores order records and images privately, and blocks bots |
| Resend | Sends order emails |
| Sentry | Records technical errors so we can fix them; set up not to collect personal data |
| Resend | Sends order emails |
Some providers may process data outside your country. TO CONFIRM: transfer safeguards, e.g. SCCs
How long we keep it
- Uploaded images and finished portraits are deleted automatically 30 days after payment. If an order is never paid, its photos are deleted when the order is abandoned. TO CONFIRM 30 days
- Order and consent records (order number, email, amount, times and delivery records, never your images) are kept for 2 years to handle disputes and chargebacks, then deleted. Backups are deleted after 30 days.
Security
Images are stored in private storage. Your portrait can only be opened through your private order link, and our staff can only reach images through a protected admin area. When you upload, your browser converts photos to JPEG, which removes location data (EXIF) in most cases.
Your rights
You can ask to access, correct, or delete your data at any time by emailing PLACEHOLDER email. Depending on where you live (e.g. EU/UK GDPR, California CCPA), you may have additional rights, including complaining to your local data protection authority. TO CONFIRM
Children
Lumtrove is not intended for anyone under 18. TO CONFIRM age
Changes
We will update this page and the date above if anything changes.
Source: legal-drafts (draft, not lawyer-reviewed)