DRAFT for Matt's review. Not yet reviewed by a lawyer and not in effect. Red marks are open gaps.
Privacy Policy
Last updated: October 21, 2026 (draft). This explains what Tailkept (New Jersey, United States) collects, why, who it's shared with and how long we keep it. [NEEDS MATT/LAWYER: legal entity name and address]
1. What we collect
- Your pet's photo and the optional pet name you type.
- Your email, if you give it (to send your preview, order emails, or tell you when our pet products go on sale). We record which consent text you agreed to and when.
- Order details: name, shipping address, what you bought. Card details go to Stripe; we never see your full card number.
- A first-party cookie (tk_vid) with a random ID, kept up to 1 year, used to count free previews and for anonymous page stats.
- Abuse protection data: a hashed form of your IP address for daily preview limits, and Cloudflare Turnstile to check that uploads come from a person.
No ads, no third-party advertising trackers. We never sell your photo or personal information.
2. How your photo is used
We use your photo only to make your preview, your portrait and your order. Portraits are digitally created with AI from your photo by our rendering provider, Replicate. We don't use your photo to train AI models. [NEEDS MATT/LAWYER: confirm Replicate's own retention/training terms for API inputs]
3. Who we share it with
- Cloudflare (hosting, R2 file storage, D1 database, Turnstile).
- Replicate (makes the portrait from your photo).
- Printify and its print providers (make and ship your order: the print file, your name and shipping address). We also use Printify to make product mockups of your design before you buy.
- Stripe (payments and sales tax calculation).
- Resend (sends our emails).
4. How long we keep it
If you don't order, we delete your photo and previews within 3 days. If you order, we keep the files until 30 days after delivery, in case we need to remake anything, then delete them. Order records are kept as long as needed for tax and accounting. [NEEDS MATT/LAWYER: retention period for emails/leads and order records (no automatic deletion is built for these yet); product mockups held at Printify]
5. Your choices
You can unsubscribe using the link in any marketing email. To ask for a copy of your data or to delete it, email hello@tailkept.com. [NEEDS MATT/LAWYER: state-law rights wording (CCPA/CPRA, Colorado, Utah, others), EU/UK if we sell there, response timelines]
6. Children
[NEEDS MATT/LAWYER: COPPA statement: site not directed to children under 13; minimum age]
7. Security
[NEEDS MATT/LAWYER: security description and breach-notice wording]
8. Changes and contact
We'll update the date above when this changes. Questions or deletion: hello@tailkept.com.