Privacy Policy

Effective Date: April 5, 2026  ·  Last Updated: April 5, 2026

Whimsical.Pet (“we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable law, including the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR).

By using whimsical.pet, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Information you provide directly:

  • Account information: Your name and email address when you create an account.
  • Pet photos: Images you upload to generate AI portraits. These are stored on our cloud infrastructure for portrait processing, gallery display, and reordering.
  • Payment information: Processed entirely by our third-party payment processor. We never receive or store your full card number, CVC, or bank details. We retain a customer ID and the last four digits of your card for your records.
  • Communications: Any messages you send to support@whimsical.pet.

Information collected automatically:

  • Usage data: Pages visited, features used, session duration, and similar interaction data — collected only with your consent via our analytics provider.
  • Session cookie: A secure, HTTP-only session cookie to keep you logged in. This cookie is strictly necessary for the service to function and is not used for advertising.
  • Device and browser information: Browser type, operating system, and IP address, collected by our analytics provider when consent is granted.

2. How We Use Your Information

  • To generate, store, and display your AI pet portraits.
  • To process orders for digital downloads and physical prints.
  • To send transactional emails (order confirmation, download links).
  • To respond to support requests.
  • To analyze site usage and improve the service (consent-gated analytics).
  • To comply with legal obligations.

We do not sell your personal data. We do not use your data for advertising profiling.

3. Photo Processing and Storage

Photos you upload are transmitted over HTTPS and stored on secure cloud infrastructure. They are processed by our AI systems to generate portrait artwork. Processed portraits are stored in your gallery and are accessible only through your authenticated account.

We do not share your photos with third parties except as required to deliver the service (e.g., sending a file to our print fulfillment partner for physical print orders).

4. Cookies

We use the following cookies:

CookieTypePurpose
Session cookieStrictly necessaryKeeps you signed in. Cannot be declined without breaking the service.
Analytics cookiesAnalyticsTracks usage patterns. Only set after you grant consent via our cookie banner.

You can manage your cookie preferences at any time using the “Cookie Preferences” link in the site footer.

5. Third-Party Services

We share data with the following categories of third-party service providers, only as necessary to operate the Service:

  • Payment processors: To securely process your payments. Payment data is handled directly by our processor — we never receive or store full card details.
  • Print fulfillment partners: To produce and ship physical print orders. We share your portrait file and shipping address with our fulfillment partner when you place a print order.
  • Cloud infrastructure providers: To store uploaded photos, generated portraits, and serve website assets securely.
  • Analytics providers: To understand how visitors use our site. Analytics data (IP address, browser, pages visited) is only collected after you grant consent via our cookie banner.

We do not sell, rent, or trade your personal information to any third party.

6. Data Retention

  • Account data: Retained until you request account deletion.
  • Pet photos: Retained for the lifetime of your account to support gallery access and reordering. Deleted within 30 days of account deletion.
  • Payment records: Retained as required by law (typically 7 years for financial records).
  • Analytics data: Retained according to our analytics provider's standard policies.

7. Your Rights — California Residents (CCPA)

If you are a California resident, you have the following rights:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale: We do not sell personal information. No opt-out action is required.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact us at support@whimsical.pet. We will respond within 45 days as required by law.

8. Your Rights — EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights:

  • Right of Access: Obtain a copy of your personal data.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Restrict Processing: Limit how we use your data in certain circumstances.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.

Our legal basis for processing your data is:

  • Contract: Processing your order and delivering portraits.
  • Consent: Analytics cookies (you may withdraw consent at any time).
  • Legal obligation: Tax records and financial compliance.

To exercise any GDPR right, contact us at support@whimsical.pet.

9. Children's Privacy

Whimsical.Pet is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child under 13 has provided us personal data, please contact us at support@whimsical.pet.

10. Data Security

We implement industry-standard technical and organizational measures to protect your data, including HTTPS encryption for all data in transit and access controls for stored data. No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to support@whimsical.pet.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new “Last Updated” date. Continued use of the service after changes are posted constitutes your acceptance of the revised policy. For significant changes, we will notify registered users by email.

12. Contact Us

Whimsical.Pet
Email: support@whimsical.pet
Location: California, United States