Privacy Policy

Your current source photograph is saved in this browser so you can resume and request corrections. Delete it in My Studio → Settings, or clear this browser’s site data. Berbernest does not persist the source photograph in its server storage; it is sent to the image provider for inspection and generation.

Unsent support text, email and order reference can be restored in the same browser tab for 30 minutes after an edit. Attachment files are not saved with the draft. You can discard the draft on the support page; signing out or changing accounts clears this tab’s support drafts.

We store generated proofs, purchased artwork, account profile and studio data, order and fulfillment records, email and delivery details, and support messages or attachments you choose to send.

We also collect limited technical and allow-listed usage data needed for security, abuse prevention, and understanding the studio journey.

When you arrive through a campaign link, we may retain bounded campaign identifiers, click identifiers, the landing path and referring host so an order can be attributed to the message that introduced it. We do not store the referring page content in order metadata.

We use this information to generate previews, secure the service, process payments, fulfill orders, provide downloads, respond to support requests, and improve reliability.

Berbernest does not sell uploaded images or use them to train a Berbernest model.

Supabase hosts account, order and private artwork data; Azure AI Foundry processes the photograph and generated image; Stripe processes payment; Prodigi prints and ships physical orders; Resend sends service email; Vercel hosts the site; and PostHog processes limited product analytics.

Prodigi receives the finished painting and delivery information required for a physical order, not the source photograph. Each provider receives only the information needed for its role.

The on-device source photograph remains available until you delete or replace it, clear site data, or the browser removes it. This is separate from server and image-provider processing; we do not promise that a browser copy is erased when a model request ends. For an unpurchased painting, the clean generated file is deleted after thirty days and its watermarked proof after one year.

Purchased artwork and order records are retained for delivery, re-download, support and applicable accounting obligations. Expired operational rate-limit records are routinely removed; resolved support records are removed after their support-retention period.

To review or delete eligible personal data, use the support page. Legal recordkeeping obligations may require us to retain part of an order record.

The site works without advertising cookies. Sign-in and checkout use only the cookies needed to keep you signed in and to return you from payment; product analytics are sent first-party to our own endpoint with a random identifier that is not shared with advertisers.

If we run advertising, the site asks before setting anything: a banner offers Meta's advertising cookies so that we can see which of our ads brought you here. If you allow it, Meta's pixel loads and records page views, product views and the start of a checkout. When a purchase completes, our server reports it to Meta with the order value, the product, an order reference, a one-way hashed form of your email address, and — so that the purchase can be matched to the visit — the Meta cookie identifiers, your IP address and your browser's user-agent string. Those matching details are kept with the order record. Your photograph, your pet's name, the painting and anything you write to us are never shared with an advertising platform.

If you decline, nothing from Meta is loaded, nothing further is sent, Meta's cookies are removed if they were already set, and you are not asked again for a year. One exception, stated plainly: if you withdraw consent after starting a checkout that then completes, the purchase report for that one order may already be in flight; withdrawal stops everything after it.

Use Cookie choice in the footer to review advertising-cookie status or change your choice. When advertising measurement is not configured, it explains that advertising cookies are inactive; no permission is needed for inactive advertising.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing.

Questions about privacy requests should be submitted through the support page. We normally respond within one month.