Privacy Policy

We collect only what we need to make your memorial keepsake: your email, the pet photos you upload, and the words you share about your pet. We don’t sell your information. We share your content with the AI services that generate your tribute and portrait, and that’s it. You can ask us to delete everything at any time.

• Email address. So we can send you the link to your keepsake.
• Your pet’s photos, name, dates, personality words, and the memories you share. All used to generate the keepsake.
• IP address and request metadata. Server logs and rate limiting. Standard for any internet service.
• Payment metadata (when paid tiers are active): an opaque payment session identifier from Dodo Payments. We never see your card details.
• Browser-local draft.Your in-progress form is saved in your browser’s localStorage so you don’t lose it on refresh. We don’t receive that data unless you submit.

• Cookies for advertising or tracking. We use none.
• Analytics that identify you personally.
• Anything about you beyond what you give us during checkout.

We use third-party providers to actually deliver the service. Each of them receives only the data they need to do their job:

• Supabase — stores your order, photos, and generated files.
• OpenAI— generates the stylized portrait from your uploaded photos. Per OpenAI’s API terms, content sent via the API is not used to train their models.
• Anthropic— writes the tribute from the words you share. Per Anthropic’s commercial API terms, content is not used to train their models.
• Resend — sends you transactional email (order received, keepsake ready).
• Inngest — orchestrates the generation pipeline. Receives your order id; does not see photos or tribute content.
• Dodo Payments (paid tiers) — processes payment. Receives your email and the product purchased.
• Vercel — hosts the site. Receives standard web-server request logs.
• Sentry — error tracking. Receives error stack traces and the request URL when something goes wrong.

We do not sell your information to anyone, for any purpose, ever.

• Your order, photos, and generated files are kept for 90 days by default so you can re-download. After that your download link expires and we delete the underlying files from storage within 30 days.
• Your email is retained alongside the order record for the same window, then anonymized.
• Server logs are retained for up to 30 days for security and debugging, then rotated.

Email privacy@kindredpaws.co from the address you used to place the order and we’ll:

• Tell you what we have on file (right to access)
• Send you a copy of your data (right to portability)
• Delete everything (right to erasure)
• Correct anything inaccurate (right to rectification)

We respond within 30 days. If you’re in the EU/UK or California, these are your statutory rights under GDPR and CCPA respectively — we honor them regardless of where you are.

Kindred Paws is not intended for anyone under 16. We don’t knowingly collect information from children. If you believe we’ve done so, email us and we’ll delete it immediately.

All data is transmitted over HTTPS. Photos and generated files sit in private storage buckets that require signed, time-limited URLs to access. API keys for AI providers are server-side only and never exposed to the browser. Nobody is impenetrable, but we take it seriously.

If we materially change this policy we’ll update the effective date above and, when reasonable, notify recent customers by email.

Questions? Email privacy@kindredpaws.co. A real person reads it.