AstroPet Studio

Privacy Policy

Last updated: 28 October 2026

This notice is provided by AstroPet Studio, independently operated by an individual based in China. For privacy questions or requests, email support@astropetstudio.com.

1. What this website does today

This introduction site does not accept photo uploads, create customer accounts, collect waitlist emails, take orders or process payments. It has no advertising tracker or analytics script installed by us.

When published, the site will be delivered through Cloudflare. Hosting and security services can process technical information such as your IP address, requested page, browser details, time of access and security events to deliver and protect the site. Security features may set essential cookies. We do not describe a site visit as anonymous or promise that the hosting provider keeps no logs.

If you email us, we receive your email address, message, attachments and related email information through our forwarding and mailbox providers. We use this to answer and resolve your request. Please do not send sensitive personal information or pet photos by email unless we arrange an appropriate way to receive them.

2. The examples on this site

The original photos show the operator’s own three dogs. The owner has explicitly agreed to public display of the original photos and AI-generated examples. These are development examples, not customer submissions. Publishing a customer’s photos or portraits in the future will require separate, optional permission.

3. Planned portrait processing — not active yet

When uploads and orders open, we expect to process the photos and theme choices you provide, your email address and verification status, order and payment-reference information, generated results, quality and safety checks, delivery records and support messages.

We will use the minimum data necessary to check files, screen content, create a watermarked preview, produce a paid order, review results, deliver files, prevent abuse, manage limited preview credits, process refunds and meet applicable legal obligations. We will not sell uploaded photos or use them in our own general-purpose model training.

We will use appropriate processing grounds where applicable: taking requested steps before a purchase and performing an order, legitimate interests in site security and responding to inquiries, legal obligations for required records, and separate consent for optional publication. Optional publicity consent will not be a condition of placing an order.

4. Third-party services

Cloudflare is the intended hosting and security provider. Email forwarding and mailbox providers handle support messages you send. We will share information only as needed for those purposes or when legally required.

For the future portrait service, Supabase is planned for email authentication, the order database and private photo storage. An external AI image provider will receive the reference photos and instructions needed to generate images. A moderation provider may inspect the submitted content. Creem is the intended payment provider, subject to merchant approval; it is not currently connected and we do not receive card payments.

The final AI, moderation and outgoing-email providers have not been selected. Before opening uploads or purchases, we will identify the actual providers, review their processing and retention terms, and update this notice. Paying an AI provider does not by itself guarantee zero retention. This website does not currently forward visitors’ photos or support messages into an AI generation pipeline.

We will not store full payment-card numbers. A future payment provider will process payment details under its own notice; we expect to retain only the references and transaction information needed to manage the order.

5. Retention and deletion

For current support inquiries, we plan to delete routine correspondence within 90 days after it is resolved, unless a continuing dispute or legal obligation requires a longer period. Provider-managed delivery and security logs follow their applicable retention settings and policies; there is no order-photo storage service on this site today.

The following is the proposed schedule for the future portrait service. Uploads will not open until the deletion jobs and access controls are implemented and checked.

DataPlanned deletion schedule
Unpurchased projects, reference photos and previewsWithin 7 days after the last activity on that unpurchased project.
Original uploads and unused intermediate results for a paid orderWithin 7 days after delivery is completed or a refund is finalized. Necessary files may be kept while an active revision or dispute is being resolved.
Final downloadable portraitsAvailable for 30 days after delivery, then deleted from active storage. Save your own copy.
Payment, refund and essential business recordsOnly as long as needed for the transaction, an active dispute or applicable record-keeping duties; the final policy will identify the relevant periods before purchases open.

Deletion must remove the stored file, not just hide it or delete a database entry. Backup copies and third-party logs may expire on different schedules; we will not promise immediate erasure from systems we do not control. Already downloaded files and copies separately saved by a recipient cannot be remotely recalled.

6. Security and international processing

The operator is based in China. Hosting, email and future service providers may process information in other countries. Before the portrait service opens, we will review the actual processing locations and applicable transfer safeguards and explain them in the updated notice.

Private storage, ownership checks and short-lived download access are planned for order photos. No technology guarantees absolute security. We do not claim these upload protections are already operating on this introduction site.

7. Your choices and rights

You can email us to request access, correction or deletion of personal information you have sent, or ask about applicable objection, restriction, portability and consent-withdrawal rights. We may need proportionate verification before disclosing information. We will explain any lawful reason we cannot immediately delete a record. You may complain to the relevant data-protection authority where applicable; this notice does not limit your statutory rights.

The planned portrait service is for adults aged 18 or over and will not accept photos of people or children. If you believe personal information about a child has been sent to us, contact us so we can investigate and remove it as appropriate.

8. Changes and contact

We will update this page when the actual service opens or processing arrangements change, and show the new revision date. Contact support@astropetstudio.com with questions.