The Switchboard Collective LLC (“CuteCanvases,” “we,” “us,” or “our”) operates cutecanvases.com and the related photo-to-artwork, digital download, and custom print services (the “Service”). This policy explains how we handle personal information when you visit, upload a photo, create an account, or place an order.
Questions about your information? Contact hello@cutecanvases.com. This policy describes our practices; it does not replace any consent that applicable law separately requires.
1. Information we collect
- Photos and artwork. Photos you select or drop into the uploader, associated file information, generated artwork and previews, style choices, AI-generated descriptions, proof approvals, and project identifiers. Photos may contain people, places, or other personal information.
- Account information. Your email address or phone number, account identifier, verification and sign-in records, and session information. An account may be created when you first verify a sign-in code.
- Order information. Selected products, artwork, prices, payment and refund status, order history, checkout email, recipient name, delivery address, shipping quotes, and tracking details. Stripe collects payment credentials directly; we receive transaction information, not your full payment card number or security code.
- Communications. Support requests, emails, feedback, and attachments you send us, together with delivery records for transactional messages.
- Device and usage information. IP address, browser and device details, approximate location inferred from IP, pages and referring URLs, interactions, timestamps, identifiers stored in cookies or browser storage, and diagnostic and security logs. Our analytics can include session replays, as explained below.
We collect information from you, your browser or device, and providers that process sign-ins, payments, delivery, and communications for us. If you give us information about someone else, such as a gift recipient or someone in a photo, you must have the necessary permission and provide them with this policy as appropriate.
2. What happens to your photo
Your photo uploads when you select or drop it, before sign-in. We store a local draft in your browser and a copy in private server storage so the process can resume. Signing in associates the project with your account. After sign-in, AI analyzes the photo to personalize your studio; when you request a painting, we send the photo and relevant instructions to our AI provider to generate artwork.
We use OpenAI for photo analysis and image generation, and Supabase for stored photos and artwork. Our service stores the source photo, generated original, watermarked preview, and operational information about the request. For a physical order, the artwork and delivery details are used by our printing and fulfillment providers, including Printful and shipping carriers.
Private storage does not mean that only you can ever access the information: authorized personnel and providers may process it to deliver the service, resolve problems, prevent abuse, and comply with law. We do not publish customer photos or artwork in our gallery or advertising without separate permission. We do not use customer photos to train our own general-purpose AI models. AI providers process requests under the terms and data controls applicable to our service account, including applicable security, abuse-prevention, and retention requirements; this policy does not promise zero retention by providers.
Upload only photos you are entitled to use. Please do not submit identity documents, payment credentials, medical records, or other highly sensitive information. Images are processed to create artwork and personalize the studio, not to verify a person’s identity.
3. How we use information
We use information to operate accounts and saved projects; analyze photos and generate, display, and deliver artwork; record approvals; calculate shipping; take payments and handle refunds; fulfill and support orders; send requested sign-in codes, receipts, and service notices; troubleshoot and improve the service; measure usage; prevent fraud, misuse, and security incidents; enforce our terms; and meet legal, accounting, and dispute-resolution obligations.
Where applicable law requires a legal basis, we rely on performing our contract with you or taking requested steps before a contract, complying with legal obligations, legitimate interests in operating and protecting the business where those interests are not overridden by your rights, and consent where required. You can withdraw consent for consent-based processing without affecting the lawfulness of earlier processing.
6. Retention and security
We retain information for as long as reasonably necessary for the purposes in this policy. Relevant factors include whether you have an active account or project, whether an order or support issue is open, download access, fraud prevention, and applicable tax, accounting, and legal-claim requirements. Different records may therefore have different retention periods. Guest uploads and abandoned projects are not necessarily deleted when you close a tab or leave the service.
You may request deletion using the contact below. We may retain information required for legal obligations, security, resolving disputes, or completing authorized transactions; backup copies may remain until removed through backup cycles. We restrict retained information to the purposes that justify keeping it. Download purchased artwork if you want a personal backup: the service is not a permanent archive.
We use safeguards intended to protect information, including private photo storage and access controls for account artwork and orders. No storage system or transmission method is completely secure, and we cannot guarantee absolute security.
7. Your choices and privacy rights
Depending on where you live and which laws apply to us, you may have rights to request access to or a copy of your personal information; learn the categories, sources, purposes, and recipients of information we process; correct inaccuracies; delete information; receive a portable copy; restrict or object to processing; withdraw consent; and opt out of sales, targeted advertising, or certain profiling. We do not use your information for profiling that produces legal or similarly significant effects.
California residents, where the CCPA applies, may also request information about disclosures and exercise applicable rights concerning sensitive personal information. The information categories and purposes above describe our practices, including during the preceding 12 months to the extent the service operated during that period. We use sensitive information, such as account-access information, to provide and secure the requested service, not to infer sensitive characteristics.
Send requests to hello@cutecanvases.com with the subject “Privacy request” and enough information to locate your account or project. For an upload made before sign-in, include the project reference if you have it. Do not send passwords, sign-in codes, or a copy of the photo unless we ask through an appropriate channel. We may need to verify your identity or an authorized agent’s authority before acting, and will respond within the period required by applicable law. If a request is denied, you may appeal by replying with “Privacy appeal” where that right applies. You may also complain to your relevant regulator. We will not unlawfully discriminate against you for exercising your rights.
Account and order messages are part of the service. If you receive optional marketing email, you can use its unsubscribe link. You can choose email sign-in instead of SMS; see our SMS terms.
8. International processing
CuteCanvases is operated from the United States and currently offers physical delivery to US addresses. Our providers may process information in the United States and other countries where they operate; privacy laws may differ from those in your location. Where applicable law requires safeguards for cross-border transfers, we use the legally required mechanisms and protections. Contact us to ask about safeguards applicable to your information.
9. Children’s information
The service is intended for adults aged 18 or over who can enter into a contract. We do not knowingly collect personal information directly from children under 13. An adult may submit a family photo that includes a child only with the necessary rights and parent or guardian permissions. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and address it.
10. Updates and contact
We may update this policy as our service or legal obligations change. The effective date above identifies the current version. We will provide additional notice of material changes and obtain consent when required by law. A policy update does not itself give us permission to use previously collected information in a materially incompatible way.
The Switchboard Collective LLC operates CuteCanvases and is responsible for the personal information described in this policy. For privacy questions, requests, or our mailing contact details, email hello@cutecanvases.com. Our Terms of Service govern use of the service and purchases.