Privacy notice — review draft

Review status

This page describes the current local preview. It has not been approved as a public privacy policy. The operator's legal name, contact address, service locations and provider agreements must be confirmed before launch.

Information used by the product

• Account information includes your email, display name and sign-in records.
• Profiles contain the names, species, stories, optional pronunciation notes and memorial dates you supply, uploaded photos and photo permission confirmation.
• Creation records contain the selected template, instructions, confirmed lyrics, generated files and processing status.
• Credit and order records track purchased credits separately from promotional rewards, invitations and generation charges.
• Sign-in cookies maintain your session. The invitation cookie records the invitation used before signup.

Only upload photos and stories that you have permission to use. Person-and-pet portraits also require permission for the person's photo.

Private files and retention

Photos and creations use private storage. Download access requires the owning account; originals also require an unlocked work. Temporary links last no longer than five minutes. Anyone holding a valid link can use it during that interval, so avoid forwarding it unintentionally.

Free previews are available for 14 days after completion. Unlocked works are available for 90 days after unlocking. Download files you wish to keep. Deleting a work removes it from your library and queues its files for cleanup. An already issued link may remain valid for up to five minutes. Files needed by an active creation remain until that task ends. Uploaded photos remain while referenced by a profile or active task.

External services

When live generation is enabled, selected photos, instructions or confirmed lyrics must be sent to the generation provider to create the requested work. Checkout is handled by the payment provider. Transactional email requires sending the recipient address and relevant message to the email provider.

This local preview uses synthetic generation, local private files and local email records. Production providers, retention terms, service regions and contractual protections have not yet been verified for this project. No claim about provider training or deletion is made here.

Current controls and contact

You can edit or delete a profile, delete an eligible work, and download available creations. The Account page offers a JSON backup of profiles, photo references, saved lyric versions, work and media records, credit events and purchases. This backup contains no media files, sign-in credentials or private storage links. Download available media separately from the library before expiry.

The JSON is a product-record backup, not an export of every internal account record. It includes deletion and expiry fields when those records are still stored; it does not restore deleted or expired files. A backup does not close the account or request a payment refund. The Account page also offers account closure after current-password confirmation or a recent sign-in for an account without a password. Download needed records and files first. Closure stops sign-in and starts cleanup of this site’s profiles, lyrics, creations and private files after active processing and temporary access links are resolved. Unconfirmed purchases, operator responsibilities and records from other modules must be reviewed before closure can be accepted. Transaction and reconciliation records are retained; closure does not request a refund or prove deletion by external providers. A private receipt shows the cleanup status.

A verified privacy contact, financial retention rules and provider-side deletion procedures must be confirmed before public registration opens. This draft does not establish a rights-request process or response deadline.