Privacy Policy

1. Information We Collect

We collect information you provide and data generated by use of the Service, including:

• Account details (e.g., email address)
• Inputs and Outputs (uploaded photos and generated portraits)
• Usage and device data (e.g., IP address, log data, timestamps, device/browser info). Usage data may include artwork consumption, feature access, and timestamps associated with your account.
• Payment status and subscription metadata from our payment processor (we do not store full card details)
• Support communications you send to us

2. How We Use Information

We use information to:

• Provide the Service and generate Outputs
• Process subscriptions and provide customer support
• Secure, monitor, and prevent abuse
• Comply with legal obligations

Photos used only to provide the Service

Uploaded photos and generated outputs may contain real, identifiable individuals. We use Inputs and Outputs only to generate and deliver your requested Outputs, operate the Service, prevent abuse, and comply with legal obligations. We do not use your photos or outputs to build advertising profiles.

No PIOTEE model training

PIOTEE does not use your uploaded photos or generated outputs to train PIOTEE-owned models or internal model-training datasets.

3. AI / Image Processing (Indirect Processing)

To generate Outputs, we rely on third-party processing providers. This means your Inputs and related request metadata may be processed indirectly through service providers as part of delivering the Service.

Where supported, we configure providers to minimize stored request payloads. However, third-party providers may process data under their own systems and policies. Unless we explicitly state otherwise, we do not make broader representations on behalf of third-party providers about their own model-training or retention practices.

4. Sharing

We share information only as needed to operate the Service:

• Service providers (for example: AI image processing, hosting/storage/database, authentication, security/CDN, email delivery/support tools, and payment processing)
• Legal or regulatory requests when required by law
• Business transfers such as a merger, acquisition, or asset sale

No sale / no advertising sharing

We do not sell personal data. We do not share uploaded photos or generated outputs for cross-context behavioral advertising.

More details (without public vendor listing)

To reduce unnecessary disclosure of our technical stack, we describe providers by category above. We can provide additional details about our service providers (and relevant data processing arrangements) upon request.

5. Private by Default; Sharing Links

User-generated content on Caricat.art is private by default and is not publicly listed.

If you create a shareable link, anyone with the link may be able to access the shared content (depending on your settings). Shared content may be copied or redistributed by others outside our control. You can revoke sharing by changing settings or requesting deletion.

6. Examples

We may display a curated set of example images for demonstration/marketing purposes. Examples are not a public feed of user posts.

We use examples that we own, have licensed, or have permission to use (e.g., stock images or model-released photos). We do not use user-generated Inputs/Outputs for Caricat.art marketing or advertising materials without explicit permission from the rights holder(s).

7. Storage and Transfers

We store data in the United States. If you access the Service from outside the United States, your data may be transferred and processed in the United States and other locations where our service providers operate.

8. Retention

We retain personal data as long as needed to provide the Service and for legitimate business needs (such as security and dispute prevention), unless a longer period is required by law.

We retain Inputs and Outputs temporarily to provide access, enable re-downloads, prevent abuse, and resolve technical or legal issues.

Original uploaded photos are retained for up to 24 hours and then deleted for privacy, except for curated sample/example assets that we own, license, or otherwise have permission to retain.

Generated outputs and related metadata may be retained for up to 30 days (or longer if required by law or for legitimate security/compliance reasons). We may retain limited records (e.g., billing, tax, anti-fraud, and security logs) as required or permitted by law.

9. Cookies and Analytics

We use essential cookies required for sign-in, security, and fraud prevention (including cookies set by security providers).

We use Google Analytics to understand how our Service is used. Google Analytics collects information such as how often users visit this site, what pages they visit when they do so, and what other sites they used prior to coming to this site. We use the information we get from Google Analytics only to improve this Service. We do not combine the information collected through the use of Google Analytics with personally identifiable information.

10. Third-Party Services (Merchandise)

Our Service includes links to third-party merchandise partners (such as Zazzle) to facilitate printing your portraits on products.

• Data Transfer: To display product previews on our Site, we share the URL of your generated Output with the partner (Zazzle) via their API. This allows us to render mockup images of your portrait on merchandise.
• Third-Party Collection: If you proceed to the partner's site to purchase, any personal data you provide (e.g., name, shipping address, payment details) is collected directly by them under their Privacy Policy. We do not access, collect, or store this transaction data.

11. Your Choices and Rights

Depending on where you live and applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal data, and to object to or restrict certain processing. You can also opt out of marketing emails.

To exercise your rights, contact hello@caricat.art. We may ask you to verify your identity before fulfilling requests.

12. Children

The Service is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If we learn that a child under 13 has provided personal data, we will delete it.

If you are located in the EEA/UK, we do not intend the Service for children under 16. If you believe a minor has provided data without appropriate permission, contact us to request deletion.

13. Security

We use access controls and logging to protect data. No system is 100% secure, so we cannot guarantee absolute security.

14. Changes

We may update this Policy; material changes will be reflected on this page with an updated date.

15. Contact

PIOTEE LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Support: hello@caricat.art.