1. Who is responsible
chen xianjie, the individual operator of PawPlusMe at https://www.pawplusme.com/, is the data controller responsible for the personal information described in this Policy. Contact [email protected] for privacy questions, access or deletion requests.
This Policy covers our website, digital portrait orders, support and optional physical-keepsake enquiries. Payment providers may also process information for their own legal and payment obligations under their own notices. This Policy explains processing; it does not request blanket consent to unrelated activities.
2. Information you provide
- Portrait content: the person and pet photographs you select and upload, generated portraits, any print-ready artwork, and your selected scene, style and product preferences. Photos can contain faces and other identifiable details; avoid unnecessary sensitive information.
- Order information: email address, order references, order status and dates, prices, currency, tax amounts where applicable, payment-provider references and payment or refund status.
- Physical enquiries: when you request a keepsake and submit delivery details, recipient name and postal address, chosen items, quotes, review decisions and relevant fulfilment communications.
- Support: your messages, attachments you choose to send and information needed to resolve a request. Do not send card security codes, passwords or unnecessary identity documents.
There is no customer registration in the current purchase flow, and we do not collect a customer account password. Full payment-card numbers and security codes are handled by the payment provider, not stored on our servers.
3. Browser, network and usage information
Our hosting and delivery providers process IP addresses, request times, requested resources, browser or device information, errors and security events as needed to serve and protect the site. IP-derived country or region is not precise GPS location.
The browser uses localStorage for recent orders and private access tokens and IndexedDB for the current photo draft, email and selections. Photos selected for the draft can therefore remain on the device before submission. Browser caches may retain application resources and the local photo-check model. Clearing site data removes these local records but does not delete server-side orders, sent emails or a copy you downloaded.
Cloudflare Web Analytics is loaded for traffic and performance measurements. We do not intentionally send your photos, order-access tokens, email or delivery address as analytics event fields. The site also loads Google Fonts and the Paddle payment SDK, which connect your browser to their providers even if you do not complete a Paddle payment. Browser privacy settings may restrict these connections. We do not currently offer a site Cookie-preference centre or an advertising-pixel opt-in flow.
4. How portrait processing works
Initial person/pet checks run in your browser using a model served by the site. That local check does not send your photos to a remote photo-check service. When you submit an order, however, both photos are uploaded to our server before payment.
After payment is verified, we send the photos, a scene reference and creative instructions to Cloudflare Workers AI to generate the portrait. We keep the result for private delivery and support. This processing combines images; we do not use it to verify your legal identity or maintain an identity-recognition database.
We do not train our own AI models on your uploads or portraits. Cloudflare's published Workers AI policy states that customer content is not used to train models. That policy does not mean our order system retains no images. We do not publish your photos or portraits or use them in marketing without a separate, explicit permission. Authorised operators may review content to resolve an order issue or assess a requested physical product.
5. Purposes and legal bases
Where a legal basis is required, we use the following bases as applicable:
| Purpose | Information used | Basis |
|---|---|---|
| Create, deliver and support a requested portrait | Photos, preferences, email and order data | Steps requested before a contract and performance of the contract |
| Process payment and refunds | Order and transaction data | Contract performance and legal obligations |
| Review and quote a requested physical item | Artwork, products, recipient name and address | Steps requested before a contract and contract performance |
| Send relevant order and support messages | Contact details and order references | Contract performance; legitimate interests in reliable communication |
| Protect access, investigate abuse and diagnose failures | Technical logs, order references and necessary content | Legitimate interests in security and reliability; legal obligations where applicable |
| Understand site traffic and performance | Limited technical and usage data | Legitimate interests where permitted; consent where legally required |
| Meet accounting, legal and dispute obligations | Necessary transaction and support records | Legal obligations and legitimate interests in legal claims |
| Any optional public showcase or promotional use | Only separately authorised content | Separate consent, which you can withdraw prospectively |
Where processing relies on consent, refusal or withdrawal does not remove unrelated rights. If data essential to producing the portrait is not provided, we may be unable to fulfil that request.
6. Providers and disclosures
We share information only as needed for the purposes described here:
| Recipient | Purpose and relevant information |
|---|---|
| Alibaba Cloud | Application hosting and storage of order records, uploaded images and results; the current application origin is in Singapore |
| Cloudflare | Website delivery, security and traffic measurement; Workers AI processes image-generation inputs; Email Routing handles messages sent to our contact address |
| Waffo Pancake | Digital checkout, transaction status and applicable payment, tax and fraud obligations; receives purchase email and transaction information, not our portrait uploads through the checkout integration |
| PayPal | Separate physical-payment processing when you use that flow; receives the payment and recipient details needed for that transaction |
| Printful | Delivery-availability and cost checks using recipient name, address and products; for a separately accepted production order, necessary artwork and fulfilment details may also be provided |
| Resend | Transactional messages with recipient email, order reference, selected products and, where relevant, a private link limited to the physical-order flow; our API email messages do not attach source photos or portraits |
| Fonts requested by your browser and email handling for correspondence forwarded to our support mailbox | |
| Paddle | The SDK loaded by the site, and checkout information if you use a transaction explicitly processed by Paddle |
We may also disclose necessary information to professional advisers or authorities when legally required, to address legal claims, or in a business transfer subject to continuing protections and required notices. We do not sell your personal information or share it for cross-context behavioural advertising. We do not operate a public customer-photo gallery.
Provider information: Cloudflare privacy, Workers AI data use, Resend data processing and Google privacy. Review the applicable notice presented by a payment provider when using its checkout.
7. Retention and deletion
We retain personal information for the purposes described in this Policy, including fulfilling orders, providing access to downloads, resolving support requests, and meeting legal and accounting obligations. Retention depends on the type of information, the status of your order, any open dispute, and applicable legal requirements. We do not offer permanent image archiving.
You can request deletion of uploaded photographs, generated images or other personal information by emailing [email protected]. We verify that the request relates to your order and delete information we are not required to retain. Information retained for a legal obligation or dispute is restricted to that purpose; retaining a transaction record does not by itself require keeping all photo content.
Browser drafts and local order history remain until you clear the site's data or the browser removes it. Clearing local data does not delete server records. Deleting a server file cannot remove copies already downloaded by you or another authorised recipient. Backup copies and providers' records may need separate processing; contact us for details relevant to your request.
Providers have their own retention rules. Resend publishes a 30-day email/log period for its standard Free, Pro and Scale plans. That supplier period is separate from our support mailbox and order records. Download a local copy of a completed portrait you wish to keep.
8. International processing
Our application server is in Singapore. Cloudflare and other providers may process information internationally, and Resend stores email data in the United States. Your location may therefore differ from the processing location.
International processing is subject to applicable data-protection law and the contractual terms governing our service providers. Contact [email protected] for information about the providers, processing locations and protections applicable to your information.
9. Security
We use HTTPS, private server storage permissions, restricted administrative access and private order-access tokens. Payment confirmations are checked by the server rather than trusting a browser success message. We do not claim that these measures eliminate all risk or constitute an independent security certification.
Keep private links secure, especially on shared devices. Report suspected exposure to [email protected]. If a personal-data breach occurs, we will assess it and notify affected people and authorities when and within the periods required by applicable law.
10. Your choices and rights
Depending on applicable law, you may request information, access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent for a separate optional purpose without affecting earlier lawful processing. You may complain to the relevant data-protection authority and exercise applicable appeal or non-discrimination rights.
Email [email protected] with sufficient order information for us to locate the record. We may verify identity in a proportionate way; do not send a full card number or unnecessary identity document. We aim to respond within 30 days and will follow any different applicable legal deadline, including requirements for explaining an extension. We will explain a lawful reason if we cannot fulfil all of a request.
You can clear browser site data and manage browser tracking protections. This can remove local drafts and private order access. Since we do not sell data or use cross-context advertising, there is no separate sale-based advertising programme to join or opt out of.
11. Messages and marketing
We send messages relevant to your order, a requested keepsake, support, security or required policy changes. The current flow does not enrol you in a marketing newsletter. Any future marketing subscription will require the appropriate separate choice and a working unsubscribe route; declining it will not prevent necessary service messages.
12. Children
The service is for customers aged 18 or older and accepts photographs of adults only. Do not upload a child's photo or submit information as an under-18 user. If we learn that such information was submitted, we will restrict processing and take appropriate steps to delete it, except where a limited record must be retained by law.
13. Changes and other services
We will update this Policy's version and date when practices change. Material changes will normally be explained on the website or by email to affected customers at least 14 days in advance, subject to urgent legal or security needs. We will seek new consent where legally necessary; continued browsing is not a substitute for it. Other websites and payment-provider pages have their own applicable notices.
14. Contact
Privacy, support and security: [email protected].
Operator: chen xianjie (individual operator). Website: https://www.pawplusme.com/.