Privacy

PaintedApp, LLC, 1327 SE Tacoma St #394, Portland, OR 97202, runs Painted Zodiac and decides what happens to the data described here. Every privacy question goes to support@painted.app.

We keep this small. When you buy, Stripe's checkout collects your name, email and shipping address and passes them to us so we can fulfil the order. Your card number never touches our servers — Stripe holds it.

If you commission a sign, we keep the text you type and the images it produces, so we can show them to you and print the one you buy. The studio works from text only: we never ask for a photograph, and we process no face or biometric data.

A cookie holds an anonymous session id that counts your studio passes. The counters are stored against that id and a one-way hash of your IP address, so clearing cookies does not reset them; they identify a browser, not a person.

If you create an account, we keep your email and your order history so you can see your own orders and renders. Signing in with Google or Apple gives us the name and email address that provider shares; with Apple you may choose to share a private relay address instead.

Each service does one job, and only sees what that job needs:

• Stripe — payment. Card details, billing and shipping address.
• Prodigi and Printful — print and apparel fulfilment. Your name, shipping address, email and the artwork file.
• OpenAI — renders commissioned art from the text you enter, and screens that text for prohibited content.
• Claid — enlarges the artwork file to print resolution. Image only, no personal details.
• Resend — sends order emails to the address you gave at checkout.
• Vercel — hosts the site and stores artwork images.
• Supabase — account sign-in and order records, if you create an account. The account directory is shared across the Painted.App family studios, so one sign-in works at each of them.
• Google and Apple — sign-in, only if you choose to use them.
• Upstash — the studio pass counters.

We do not sell or rent your data to anyone. Advertising and analytics tags load only if you accept them in the cookie banner, and never when your browser sends a Global Privacy Control signal. To opt out of any sale or sharing for targeted advertising, use Do Not Sell or Share My Personal Information; the cookie policy lists which tags are switched on.

• The download link in your confirmation email stops working after 30 days; signed-in customers can issue a fresh link from their account.
• Renders and orders stay visible in your account for 365 days. After that they are hidden from the account; the stored files and records are not yet deleted on a schedule, and we delete them when you ask.
• Studio pass counters have no expiry today; they hold only the anonymous id and the hashed IP.
• Order records are kept as long as bookkeeping, tax and dispute handling require.

To see, correct or delete what we hold about you, or to close your account, write support@painted.app from the address on the account. There is no delete button yet, so the inbox is the way; we confirm when it is done. That inbox is read by the people who run the shop.

Painted Zodiac is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has given us personal information, write support@painted.app and we will delete it.