Effective date: 2026-11-05

Privacy

Imagined Family (imaginedfamily.com). Contact: hello@imaginedfamily.com.

What we collect and why

If you add your names or your pet's name, we use them only to label your portraits' sleeve and, if you turn it on, your share card. They are deleted along with your order.

We collect your uploaded adult and optional pet photos, file details, screening results, generated previews and portraits, choices and approval times to create and deliver your portraits. Screening checks nudity, faces and estimated age; it can make mistakes.

For orders made from a couple photo, we use Amazon Rekognition (AWS) to compare faces and pick the closest likeness. Your photos are used only for that comparison and are not kept by AWS.

We collect your email, account and session details, order and payment records, your permission attestation, and support messages to provide sign-in, checkout, delivery and support. Stripe handles card details; we do not collect your full card number. Sessions record IP addresses and browser details; attestations include a salted, date-dependent IP hash. Optional Google sign-in adds profile and authentication details.

We use cookies, product events and operational logs to remember visits, attribute referrals, measure use and protect the service. Events include visitor or order identifiers, actions, times, price and campaign information, without photos. Authentication cookies normally last seven days; price, visitor and referral cookies last up to 30 days when set. There is no analytics opt-out. Account, payment, attestation and analytics records are separate from image files and have no fixed automatic deletion period.

We process information to perform our contract, operate and protect the service, meet legal duties and, where required, with consent. Your checkbox confirms your partner agreed; it does not collect consent directly from them. Only upload photos both adults have agreed to use for this purpose. Either adult can contact us about their information.

Who receives it

Google also receives authentication details if you choose Google sign-in. Sentry receives filtered error reports when enabled. Processing can take place outside Brazil, including in the US and other countries where providers operate, under applicable data-processing and transfer terms.

Photos, portraits and deletion

We keep uploaded photos, generated originals and delivered portraits for seven days after delivery, subject to an absolute limit of 30 days from order creation. Download within that deadline; there is no permanent portrait library. Reusing photos in another order creates separate copies with separate deadlines.

Unpaid previews last seven days from order creation. Only an open checkout extends this period, until its recorded expiry and by at most 24 hours. Payment-first orders have a 24-hour checkout window from creation or a newly reserved checkout. Every window remains subject to the 30-day limit.

Paid orders awaiting approval, generation or an in-flight refund retain their images while processing continues. Failed orders, completed or failed refunds and settled orders needing review retain images for seven days after that transition, within the same 30-day limit. Repeated refund checks do not extend it. We stop starting generation after 23 days and request a refund if we cannot deliver within that processing window. Unattached completed uploads last seven days; incomplete uploads become due for cleanup after 24 hours.

Use Delete on the order page to hide images, remove share access, cancel generation and request deletion now. This takes priority over every retention window. We attempt file removal immediately and retry failures through scheduled cleanup; storage failures can delay completion. A provider call already running may finish, but its result will not be delivered. Previously issued image links can work until the file is removed or the link expires, at most 5 minutes after issue. Files already downloaded or shared elsewhere cannot be recalled.

Order deletion does not erase all account, payment, attestation or analytics records; account deletion removes your account and sessions but some other records remain. Deletion does not itself issue a refund or erase provider records.

Google Cloud's terms and retention rules restrict training without prior permission or instruction, but permit model-dependent caching for up to 24 hours and separate safety logging and authorized human review, including flagged prompts for up to 90 days under its abuse-monitoring rules.

Sightengine says it deletes media after processing by default, except where storage features or a changed account arrangement apply.

Neon recovery history and backups are separate from live records and are not erased by an order deletion.

Other providers' payment, email, security and operational records follow their own retention and legal duties; deleting an order does not send them an erasure request.

Your choices and rights

You can buy as a guest, leave out the pet photo and delete an order's images. Email hello@imaginedfamily.com for access, correction, deletion, portability, information about sharing, withdrawal of consent or objection where applicable. We may verify your identity and locate your records; legal retention duties can limit erasure. You can also contact the relevant data-protection authority.

Both adults must be at least 18. Do not upload photos of real children or anyone without permission. If your photo was uploaded without permission, contact hello@imaginedfamily.com with enough information to locate it.