E-mails
Last updated: October 16, 2026
In short. You send photos of yourself, other people or pets. We use them only to create your portraits. They are kept in private storage, never sold, never published, and never used to train models of our own.
We delete photos from orders that were never purchased after 30 days, and original photos from paid orders after 60 days. You can ask us to delete your data at any time. We use no advertising trackers, and your card details never touch our servers.
mypet is run by BG Tecnologia Ltda, which is responsible for the data described on this page. For anything about privacy, write to privacidade@mypet.example.
The images you upload: photos of you, of other people and of pets. A photo of a face can count as sensitive personal data (and, depending on how it is used, as biometric data). We treat it with extra care and use it only to deliver what you ordered. We do not try to identify anyone and we do not build profiles from faces.
We ask for your email to send the private link to your previews, tell you when they are ready, deliver your portraits and, if needed, handle a refund. On the preview screen the email is optional. If you enter the email of someone who will receive a gift, we use that address only to send the gift.
Payments are handled by the payment processor we contract. You type your card details on its page, and they never pass through our servers. We get back a confirmation, the amount and a transaction reference. The amount charged is always calculated by us, on the server.
To prevent abuse (for example, someone generating thousands of previews), we count how often the same IP address or email uses the service within a period. We also use a captcha to tell people from bots. These counters exist only for protection and expire on their own.
There are no customer accounts or passwords. You reach your orders through a private link containing a long random code. We store only a scrambled version (a hash) of that code, and the link is valid for 30 days. We do not use Google Analytics, advertising pixels or other third-party trackers. If that ever changes, this page will be updated.
Upload only photos you have the right to use. If another person appears in a photo, you confirm that they know about it and agree.
Photos of children and teenagers may be uploaded only with the permission of a parent or legal guardian. Before uploading, you must tick a box stating that you have this permission. If you are the guardian and want a child’s photos deleted, or if a photo was uploaded without permission, write to us and we will delete it.
| Purpose | Data | Legal basis |
|---|---|---|
| Creating previews and portraits | Photos, chosen styles | Performing the contract, and your consent to process the photos (given when you upload them) |
| Sending links, order notices and delivery | Email, order data | Performing the contract |
| Charging and refunding | Amount, payment reference, email | Performing the contract and legal obligation |
| Keeping tax records | Order and payment records, without photos | Legal obligation |
| Preventing fraud and abuse | IP, usage counters | Legitimate interest |
| Sending offers by email | Email, record of your opt-in | Consent (see below) |
We send offers and news only if you tick a separate box for it. It is unticked by default and is never part of any other notice. We record when and how you agreed. Every marketing email has an unsubscribe link, and you can also ask us by email.
Order emails (preview link, previews ready, delivery, gift and refund) do not depend on this opt-in, because they are part of the service.
We use other companies for parts we do not run ourselves. Each receives only what it needs for its task.
| Company | What it receives | Why |
|---|---|---|
| Supabase | Order data (email, styles, status, amounts) | Database for orders. |
| Cloudflare | Photos and portraits (private R2 storage); browser signals for the Turnstile captcha | Storing images securely and blocking bots. |
| Google (Gemini) or Kie.ai | Your photos and the style instructions | Generating the portraits. Kie.ai resells access to Gemini. The final choice between the two has not been made yet. |
| Resend | Email address and message content | Sending order emails and, if you opt in, marketing emails. |
| Vercel | Site access data (such as IP) and the requests made to the site | Hosting the website. |
| Payment processor | Card details, amount, email | Taking payment. Your card never passes through us. |
| Upstash | IP and counters | Enforcing usage limits. |
We send photos to the AI provider only to generate your portrait, and we configure our account and ask that they not be used to train models. We do not sell your data, we do not use it to train models of our own, and we do not publish your photos. We may also share data when required by law or a court order.
Some of these providers are in the United States or other countries, so your data may be processed outside your own country. When that happens we seek appropriate safeguards, such as standard contractual clauses, where they apply.
We use no advertising cookies and no third-party analytics cookies.
No system is completely free of failures. If an incident affects you, we will tell you as the law requires.
| What | How long |
|---|---|
| Photos, previews and portraits of an order never purchased | Deleted 30 days after the order is created. |
| Original photos of a paid order | Deleted 60 days after payment. |
| Final portraits of a paid order | Available to download again for 12 months, then deleted. |
| Order and payment records (no photos) | 5 years, as required for tax and accounting. |
| Private order link | Valid for 30 days. |
| Gift link for the recipient | Valid for 180 days after it is sent. |
An automatic job runs every day and truly deletes the files in storage and the data in the database once the period ends. If you ask for deletion sooner, we handle it within 15 days, removing your photos and portraits. We keep only what the law requires us to keep.
At any time you can ask to:
Write to privacidade@mypet.example. We answer within 15 days. To protect you, we may ask you to prove you are the person behind the order, for example by replying from the email used for it.
These rights come from Brazil’s General Data Protection Law (LGPD). If you live in the European Union or the United Kingdom, the GDPR also applies. You may complain to Brazil’s data protection authority (ANPD) or to the data protection authority of your own country.
If we change how we handle data, we will update this page and the date at the top. Important changes will be announced on the site or by email.