Privacy Policy

Petohra allows users to create AI-generated fantasy cards based on photographs of their pets, purchase credits, save and download generated cards, and where available order personalized physical products.

This Privacy Policy explains what personal data we collect, why we use it, who we may share it with, how long we retain it and the rights you have regarding your personal data.

Petohra is the controller responsible for the processing of personal data described in this Privacy Policy.

Petohra is a sole proprietorship registered with the Dutch Chamber of Commerce under number 89384113. VAT number: NL004723226B28.

For privacy questions or requests, contact us at petohra.business@gmail.com.

We may collect account information such as your email address, account identifier and account settings.

When you create a card, we may process pet photographs, pet names, species, gender, selected personality traits, generation settings and prompts. Petohra also generates card information such as Aura, rarity, statistics, attacks, abilities and artwork.

When you make a purchase, we may process transaction information such as purchased credits, payment status, payment references, amounts and order information. We do not directly store your complete payment card number or card security code.

We may also process messages you send us and limited technical information such as IP address, browser and device information, timestamps, security information and error logs.

We use your information to create and manage your account, provide AI card generation, maintain your Petohra collection, process purchases and credits, provide available physical products, respond to support requests and operate the website.

We may also use limited technical and security information to prevent fraud or abuse, diagnose errors, protect accounts and improve the reliability and security of Petohra.

Where required, we may process or retain information to comply with legal, tax, accounting or other regulatory obligations.

Pet photographs you upload are used as visual references to create the AI-generated artwork you request. You should upload only photographs that you own or are authorized to use.

Uploaded photographs and related generation information may be transmitted to service providers necessary to perform the generation. Petohra does not claim ownership of the photographs you upload.

Original pet photographs are not intended to be permanently stored as part of your Petohra collection. Temporary copies may exist for the time technically necessary to upload, transmit and process a generation.

During generation, Petohra automatically determines certain fictional card characteristics, including Aura, rarity, statistics, attacks and abilities. These characteristics form part of the generated Petohra card.

Completed generated cards and related card information may be stored and associated with your account so that they remain available through My Cards.

Saved information may include generated artwork, Aura, rarity, statistics, attacks, abilities and other information necessary to display and manage your collection.

We do not use your private generated cards for advertising or public promotion without your separate permission.

Payments are processed by Stripe. Stripe may process payment details, billing information, device information and fraud-prevention information. Petohra normally receives only transaction information such as payment status, amount, currency, payment references and limited customer information.

Where personalized physical products are available, information necessary to produce and deliver an order may be shared with the relevant fulfilment provider. This may include generated artwork, product details, recipient name and shipping address.

We use third-party service providers where necessary to operate Petohra. These may include Supabase for authentication and database services, OpenAI for artificial intelligence processing, Cloudinary for image storage and delivery, Stripe for payments, FormSubmit for contact-form messages and Printful for available printing, fulfilment and shipping services.

Our hosting and infrastructure providers may also process limited technical information necessary to host, secure and deliver Petohra.

These providers may process information only as necessary to provide their services or fulfil their own legal obligations. Some providers may process data outside the European Economic Area. Where required, appropriate legal safeguards for international data transfers are used.

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law.

Account information and saved generated cards may be retained while your account remains active. Original pet photographs are intended to be processed for generation rather than permanently retained as part of your account.

Payment, order, tax and accounting information may be retained for the period required by applicable law. Temporary backups, cached files and technical logs may remain for a limited period before being removed or overwritten.

Petohra may use necessary cookies or similar technologies to keep you signed in, maintain website functionality, protect the service and remember essential settings.

If we use non-essential analytics, personalization or marketing cookies, we will request consent where required by applicable law.

We take reasonable technical and organizational measures intended to protect personal data against unauthorized access, accidental loss, alteration, disclosure or destruction.

No online service can guarantee complete security. You are responsible for protecting your login credentials and should contact us if you suspect unauthorized access to your account.

Under applicable data-protection law, you may have rights regarding your personal data, including the right to access, correct or delete your data, restrict or object to certain processing, and request data portability where applicable.

Where we rely on your consent, you may withdraw that consent at any time. Certain rights may be limited where we are legally required or otherwise permitted to retain or process information.

To exercise a privacy right, contact us at petohra.business@gmail.com. We may ask for information necessary to verify your identity before handling your request.

You also have the right to submit a complaint to the Autoriteit Persoonsgegevens, the Dutch data-protection authority, or another competent supervisory authority where applicable.

Petohra is not intended to be purchased independently by children. Users under 18 may use the service only with the permission and supervision of a parent or legal guardian.

If you believe that a child has provided personal data without appropriate permission, contact us at petohra.business@gmail.com.

We may update this Privacy Policy when Petohra, our service providers, our processing activities or applicable legal requirements change. The latest version will be published on this page with an updated effective date.

For privacy questions, data requests or complaints, contact Petohra at petohra.business@gmail.com.

Petohra is registered with the Dutch Chamber of Commerce under number 89384113. VAT number: NL004723226B28.