Privacy Policy
This Privacy Policy explains what information SantaPet (“we”, “us”) handles when you use https://xmaspet.com, an indie AI tool that turns a pet photo into a festive Christmas costume preview and optional paid download. We are a solo individual seller, not a registered company with a company number.
1. What we collect
- Pet photos you upload. Images you submit to generate a preview or unlock a download. These may contain personal data if a person appears in the photo or if the image is otherwise identifiable.
- Technical / usage data. Approximate IP address, request timestamps, user-agent, and basic rate-limit counters so we can operate the service, prevent abuse, and cap daily AI usage.
- Generation metadata. Temporary identifiers (for example a request id), costume style chosen, and unlock status needed to deliver a watermarked preview or clean PNG.
- Payment-related data. Payments are processed by Creem as merchant of record. We do not store your full card number. Creem may share order or checkout identifiers, payment status, and the email you provide at checkout so we can fulfill the unlock and respond to support requests.
- Support email. If you email us (for example at [email protected]), we receive the address and message content you send.
We do not require a SantaPet account to use the free preview. We do not intentionally collect government IDs, precise geolocation, or payment card PANs on our site.
2. How we use data
- To run AI image generation (currently via Cloudflare Workers AI) and return a watermarked preview.
- To verify payment and deliver a one-time unlock for a watermark-free PNG download (priced about USD $1.99).
- To enforce rate limits, daily generation caps, security, and our Acceptable Use Policy.
- To respond to support, refund, or deletion requests.
- To improve reliability (for example diagnosing failed generations).
We do not sell your personal data. We do not use uploaded pet photos for advertising profiles.
3. AI processing
Uploaded images are sent to our Cloudflare-hosted backend and may be processed by Cloudflare Workers AI models to create a festive costume redraw. Outputs are AI-generated and may be imperfect. Processing happens to provide the service you requested; we do not claim that uploaded photos are used to train public foundation models under our control. Third-party infrastructure providers process data under their own terms as our processors/subprocessors for hosting, AI inference, storage, and payments.
4. Retention
- Preview / unlock blobs. Stored temporarily (on the order of about 24 hours, subject to configuration) so you can download after payment, then expire or are overwritten.
- Rate-limit counters. Short-lived keys tied to IP or similar identifiers.
- Payment records. Held by Creem according to their policies; we may keep checkout/order ids and support correspondence as needed for accounting, fraud prevention, and dispute handling.
- Support emails. Kept as long as reasonably needed to resolve your request and for legitimate business records.
5. Sharing
We share data only as needed with:
- Cloudflare — hosting (Pages/Workers), Workers AI, and related storage/network services.
- Creem — payment processing and merchant-of-record checkout.
- Authorities or claimants when legally required, or to protect rights, safety, and the integrity of the service.
6. Cookies and local storage
We may use browser storage (for example sessionStorage) for functional needs such as remembering a recent request id after checkout redirect. We do not run a third-party advertising pixel suite on the core generator flow. Your browser and CDN may set standard technical cookies.
7. Your choices and deletion
You can stop uploading photos at any time. To request deletion of data we still hold that we can reasonably identify (for example a request id, checkout id, or support thread), email [email protected] with the relevant identifiers. We will delete or anonymize what we control where feasible, except records we must keep for legal, security, or payment dispute reasons. Preview data that has already expired may already be gone.
8. Children
SantaPet is intended for adults. Do not upload photos of children or use the service if you are under 16 (or the higher age required in your country). We do not knowingly collect children’s data; contact us to remove any such material.
9. International processing
The operator is based in China. Infrastructure and payment providers may process data in other countries. By using the service you understand that data may be transferred to those locations under the providers’ safeguards.
10. Contact
Privacy and data requests: [email protected]
Product: SantaPet · https://xmaspet.com
11. Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.