The fine print

Privacy Policy

Last updated: October 13, 2026

Who keeps your data

PaintedApp, LLC, 1327 SE Tacoma St #394, Portland, OR 97202, operates Robber Baron and is the controller of the personal data it collects. Write to support@painted.app about anything on this page.

Your photograph, at a sitting

The photograph you upload is held in the server’s memory for the length of the sitting, sent to OpenAI to be checked for safety and painted, and then dropped. We never write it to our storage, we keep no copy, and nobody here looks at it. One automated check asks only whether it shows a single adult, a recognisable public figure or a uniform, so we can refuse those; nothing is matched against a database, no name is recorded, and no biometric profile is built.

What we keep is the painted cover: the bare painting, the finished cover with your caption, and a small record of the manner, the caption and the date, stored with Vercel so the cover can be bought and printed. A cover you never buy stays until you ask us to delete it; write from any address with the date of the sitting and the caption, and we remove it. A cover you buy stays as long as the order record, so a damaged canvas can be reprinted.

What we collect when you buy

Only what a sale needs: your name, email, phone, delivery address and what you bought. We use it to make and deliver the canvas, to send the receipt and the tracking, and to keep the accounts the law requires. The legal basis is the contract you made when you paid, and our legal obligation to keep tax records.

What we do not collect

The site runs no analytics, advertising or tracking scripts. It sets one cookie, to count your free sittings (see the Cookie Policy). Your IP address is held in the server’s memory, never stored, to limit how many sittings one connection can ask for in an hour. The public ledger shows the cover, number, size and date of each sale, and never a name.

Who else handles it

• OpenAI, L.L.C. checks and paints your photograph at a sitting, and checks your caption. Its API keeps what it is sent for up to thirty days to watch for abuse, longer only where the law requires, and does not train its models on it.
• Stripe, Inc. takes the payment and keeps the record of it, with your name, email, phone, delivery address and card. We never see the card.
• Prodigi Group Ltd prints the canvas and delivers it, so it receives your name, delivery address, email and phone, the print file and the edition number.
• Claid.ai enlarges the painting to print size when you buy it. It receives the painting only, never your name and never your photograph.
• Resend, Inc. sends the receipt and the shipping email to your address.
• Vercel, Inc. hosts the site and stores the painted covers and the print files. Its servers keep standard request logs, with IP address, for a short period.

Each is bound to use the data only to do that job for us. Some are outside your country, so data may leave the EU or the UK; they rely on standard contractual clauses or the EU-US Data Privacy Framework for that.

How long it stays

Order records stay for seven years, for tax. A cover bought at a sitting stays as long as its order. A cover not bought stays until you ask us to delete it. The photograph is never stored, so there is nothing of it to delete.

Your rights

You can ask for a copy of your data, a correction, deletion, or a limit on its use, and you can object to it. If you are in California you also have the right to know and to delete, and we do not sell or share personal information (see Your Privacy Choices). Write to support@painted.app; we answer within thirty days. You may also complain to your data protection authority.

Children

The site is for adults. A sitting needs the sitter to be 18 or older, and we delete any cover we learn shows a child.

Changes

Every change to this policy is dated on the Legal and Changes page.