Privacy Policy
Last updated:
This policy explains how PoseForTreats ("we", "us") handles personal information when you use https://posefortreats.com (the "Service"): what we collect, why, who else handles it, how long we keep it and what you can do about it.
1. Who is responsible
The PoseForTreats team, based in China, runs PoseForTreats and is responsible for your personal information under this policy.
- Contact for privacy questions and requests: support@posefortreats.com
- Data protection officer: not appointed
2. The short version
- You sign in with Google. We get your name, email address, profile picture link and Google account ID.
- You upload photos of your pet. We use them only to provide the service: to check them, store them for you and make the portraits you ask for. We don't show them to anyone else, use them as examples or ads, or use them to train AI. Our team doesn't look at them.
- To make a portrait, we send your photo to our AI provider, KIE. KIE keeps uploaded photos for up to 3 days and finished images for up to 14 days, and we can't delete its copies sooner.
- Your photos and portraits are available for 7 days; after that, we remove them from our storage within 24 hours. If you delete them or your account, they're removed right away.
- Payments are handled by Waffo Pancake. We never see your full card number.
- We use Google Analytics and Microsoft Clarity to understand how the site is used. We don't sell your personal information, use it for our own advertising or show ads. Clarity sets some Microsoft cookies that Microsoft also uses for advertising (section 7).
3. What we collect
From your Google sign-in: your name, email address, the link to your Google profile picture and your Google account ID. We also keep sign-in sessions, which include your IP address and browser details.
Photos you upload: the photo files and small preview copies. Before saving a photo, we re-encode it and remove location data and other hidden details. We don't keep the original file.
Portraits: the images we generate for you, with and without the watermark.
Generation records: for each portrait, the style or series name, the time, the credits spent or returned, the status and, if it failed, why. These records contain no images.
Content check records: when we automatically check a photo or a finished portrait (section 5), we record which it was, the result, the checking model, the time and the photo or task number. No images.
Credits and purchases: your credit balance and history, your purchases (pack, amount, status and Waffo's order number) and redeem codes you used. Card details are handled by Waffo, not by us.
Free-credit marker: when your account first receives free credits, we store a coded version of your Google account ID (a keyed hash) and the date, so that the same Google account can't receive free credits twice. It doesn't contain your name, email or account number, and the Google account ID can't be read back from it.
Messages: when you use the contact form, your name, email address and message are sent to our support inbox; we don't store them on the website. We keep a short-lived record of each form submission (a keyed hash of your network address, the result and the time) to stop spam. Emails you send us, including any images you attach, stay in our support inbox.
Usage and technical data: pages you visit and how you use them (through Google Analytics and Microsoft Clarity, section 7); server logs with request paths, status codes and errors; and a count of your uploads in the past hour to enforce upload limits.
We don't use face recognition and don't build any profile of the people who appear in photos.
4. Why we use it
| What we use it for | Legal basis (where the GDPR or similar laws apply) |
|---|---|
| Running your account, storing your photos and making your portraits | Performing our contract with you |
| Credits, purchases, refunds and the watermark rules | Performing our contract with you |
| Answering your messages and handling refunds and reports | Performing our contract, and our legitimate interest in providing support |
| Checking photos and portraits for content we don't allow | Our legitimate interest in keeping the Service safe, and legal obligations |
| Preventing abuse: one free-credit gift per Google account, upload and form limits, spam checks | Our legitimate interest in preventing fraud and abuse |
| Understanding how the site is used so we can improve it | Our legitimate interest in improving the Service |
| Keeping records the law requires | Legal obligation |
We don't send marketing emails (section 12).
5. How your photos and portraits are handled
Generating a portrait. When you press Generate, we send your photo and the style's instructions to KIE, our AI provider, which runs the AI model you picked: Google's Nano Banana Pro, ByteDance's Seedream 5.0 Pro or OpenAI's GPT Image 2. KIE may use other technical providers to run these models: KIE's website indicates that it runs Nano Banana Pro through Replicate and GPT Image 2 through fal. We haven't been able to confirm which provider it uses for Seedream 5.0 Pro.
What KIE does with them. Based on KIE's own documentation:
- KIE stores the photos we send and the images it makes at web links that don't need a password to open. We give the photos random, hard-to-guess file names.
- KIE's documentation gives different retention periods in different places. We list the longest: uploaded photos up to 3 days and finished images up to 14 days. KIE also keeps a record of each generation request for 2 months. The record includes the generation settings and the links to your photo and the finished image.
- KIE has no way for us to delete these copies sooner. When you delete a photo, a portrait or your account, we delete our copies right away, but KIE's copies stay until its own periods end.
- KIE's terms allow it to use content sent to it to operate and improve its services. They don't say whether that includes training AI models. KIE's privacy policy doesn't cover photos or images.
What we do and don't do. We use your photos only to provide the service: to check them, store them for you and make the portraits you ask for. We don't use your photos or portraits as examples, in ads or to train AI models, and our team doesn't look at them. Portraits are private to your account: there's no public gallery and no sharing links.
Automatic checks. When you upload a photo, an AI image model running on Cloudflare checks it for three things: whether there's an animal, whether a person is the main subject, and whether it may break our Content Policy. A rejected photo isn't saved. Finished portraits are also checked automatically before you see them; a blocked portrait counts as failed and its credits come back. The AI models have their own safety filters too. These checks are automatic and can be wrong; if you think a photo was rejected by mistake, try another one or email us.
6. Who we share it with
We don't sell your personal information or use it for our own advertising. Microsoft Clarity sets Microsoft cookies that Microsoft says it also uses for advertising; our Cookie Policy explains how to block them. We share your personal information only with these service providers, for the purposes listed, and when the law requires it:
| Provider | What it does for us | What it receives |
|---|---|---|
| KIE (NexusAI Services LLC and Innoleap AI LLC, United States) | Generates portraits using Google's, ByteDance's and OpenAI's models, partly through Replicate and fal | Your photo and the request for each portrait (section 5) |
| Cloudflare | Hosts the site; stores photos and portraits; makes watermarked and preview copies; runs the automatic content checks; runs the spam check on the contact form; keeps server logs | Everything stored on the Service, technical data |
| Sign-in with Google; Google Analytics | Sign-in data; usage data (section 7) | |
| Microsoft | Microsoft Clarity | Usage data and session recordings (section 7) |
| Resend | Sends our welcome email | Your name and email address |
| Waffo Pancake | Processes payments as merchant of record; sends receipts; handles payment disputes | Your payment details and purchase |
We may also disclose information if the law, a court order or a valid request from authorities requires it, to protect people from harm, or as part of a sale or merger of the business (in which case this policy keeps applying to your information).
7. Cookies and analytics
We use cookies to keep you signed in and to protect the site, and Google Analytics and Microsoft Clarity to understand how the site is used. Clarity can record how pages are used; we hide your photos and portraits from those recordings, and we don't send your email address, photos or file names to either tool. The analytics tools load only on our live site. Microsoft says some of the Microsoft cookies that Clarity sets are also used for advertising. Our Cookie Policy lists the cookies and how to block them. See also Google's privacy policy and Microsoft's privacy statement.
8. How long we keep it
| Information | How long we keep it | When you delete your account |
|---|---|---|
| Photos you upload (files, previews and records) | Available for 7 days after upload; removed from our storage within 24 hours after that | Deleted right away |
| Portraits (with and without watermark) | Available for 7 days after they're made; removed from our storage within 24 hours after that | Deleted right away |
| Generation records (no images) | As long as your account exists, so expired portraits still show as "expired" and your credit history adds up | Deleted |
| Content check records (no images) | 12 months after the check | Kept until those 12 months are up, with the link to your account removed |
| Free-credit marker (keyed hash of your Google account ID and the date) | Kept with no end date | Kept, so the same Google account doesn't get free credits again |
| Account setup details (free credits given, welcome email sent) | As long as your account exists | Deleted |
| Credits, credit history, purchases and redeemed codes | As long as your account exists | Deleted; unused credits are lost. Waffo keeps its own records of your payments |
| Paid orders we couldn't match to an account (order number, reason, amount, currency, pack and time; no account link) | 12 months | Not linked to an account |
| Sign-in data and sessions | As long as your account exists; a session lasts up to 7 days and renews while you use the site | Deleted |
| Contact form records (keyed hash of your network address, result, time) | 1 day | Not linked to an account |
| Upload counts (account and time, no photos) | 1 hour | Deleted |
| Emails with our support team, including images you send | Until you ask us to delete them | Not deleted automatically; ask us |
| KIE's copies | Photos up to 3 days; finished images up to 14 days; a record of each request, with the settings and the links to the photo and image, 2 months | We can't delete them (section 5) |
| Task progress kept by our hosting provider (task number and step results; no photos or prompts) | 3 to 30 days, set by Cloudflare | Not deleted separately |
| Server logs (request paths, status codes, errors; no photos or email addresses) | 7 days | Not deleted separately |
| Google Analytics data | 2 months | Not linked to your account |
| Microsoft Clarity data | Recordings 30 days (9 months for sessions we label or favorite); other usage data 9 months (Microsoft's periods) | Not linked to your account |
Example images, the original stock photos behind them and our own test photos aren't personal information about you and aren't covered by this table.
9. Deleting your photos, portraits and account
- You can delete any photo or portrait yourself at any time. It's removed from our storage right away.
- You can delete your account in Account → Delete account. If your last sign-in was more than a day ago, we ask you to sign in with Google again first.
- Deleting your account removes your photos, portraits, generation records, credits and purchase history from our systems right away. Unused credits are lost. In our database, two things stay: the free-credit marker and content check records with the link to you removed. Server logs and task progress at our hosting provider expire on their own schedules, and emails you've sent us stay until you ask us to delete them (section 8). If you sign up again with the same Google account, it's a new account, without free credits.
- We can't delete KIE's copies (section 5) or Waffo's payment records.
10. Security
We use HTTPS everywhere. Photos and portraits are kept in private storage and are only available to your account through our site; our team has no tool for viewing them. Where we only need to recognize something, such as a Google account for the free-credit rule or a network address for spam limits, we store a keyed hash instead of the real value. No system is perfectly secure. If a breach affects your personal information, we'll tell you and the authorities as the law requires.
11. Your rights
Depending on where you live, you can ask us to:
- tell you what personal information we hold about you and send you a copy;
- correct it;
- delete it (you can also delete your account yourself);
- restrict or object to how we use it;
- send it to you in a machine-readable format; and
- withdraw any consent you've given.
Email support@posefortreats.com from the address you sign in with. We'll reply within 30 days. We may need to confirm the request comes from you. You can also complain to your local data protection authority.
California residents: you have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We don't sell personal information. Microsoft Clarity sets Microsoft cookies that Microsoft says it also uses for advertising, which California law may treat as sharing; you can block them as our Cookie Policy explains. We won't treat you differently for using your rights.
12. Emails
We send one email: a welcome email when you create an account. We don't send newsletters or marketing emails. Waffo emails your receipts when you buy credits.
13. International transfers
PoseForTreats is run from China, and our providers process information in the United States and other countries. Your information may be processed in these countries, whose data protection laws may differ from yours.
14. Children
The Service is for people aged 18 and over. We don't knowingly collect personal information from anyone younger. If you think a child has used the Service, email us and we'll delete their information.
15. Changes to this policy
If we make a significant change, we'll email account holders at least 15 days before it takes effect and update the date at the top of this page.
16. Contact
- Email: support@posefortreats.com
- Operator: the PoseForTreats team, based in China