Petrait

Privacy Policy

Last updated: June 28, 2026

1. Data we collect

To provide the Petrait service and fulfill your order, we collect:

  • Your name
  • Your email address
  • Your shipping address (for framed print orders)
  • Payment information, processed directly by our payment provider — we do not store your card details ourselves
  • Photos you upload of your dog, and the AI-generated portraits created from them

2. How we use your data

We use the data above to:

  • Generate your AI portrait and process your order
  • Print and ship framed prints to your address
  • Process payment and send order confirmations or receipts
  • Respond to customer service requests, including returns and refunds

We do not sell your personal data to third parties, and we do not use your uploaded photos for marketing without your consent.

3. Third parties we share data with

We rely on the following service providers (data processors) to operate Petrait:

  • Stripe — to process payments securely. Stripe receives your payment details and billing information.
  • Gelato — to print and ship framed orders. Gelato receives your shipping address and the final portrait image for production.
  • Replicate — to run the AI models that generate your portrait. Replicate processes the photo you upload in order to produce the generated image.

Each of these providers only receives the data necessary to perform their specific function, and is contractually required to handle it securely.

4. Data retention

We retain order data, including uploaded photos and generated portraits, for as long as necessary to fulfill your order, handle any related returns or disputes, and comply with our legal and accounting obligations — typically up to 7 years for financial records, as required under Swedish law. Uploaded photos that do not result in a completed order may be deleted sooner.

5. Your rights under GDPR

As a data subject under the EU General Data Protection Regulation (GDPR), you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data ("right to be forgotten"), subject to our legal retention obligations
  • Request a portable copy of your data in a structured, machine-readable format
  • Object to or restrict certain processing of your data
  • Lodge a complaint with your local data protection authority, or with Sweden's Authority for Privacy Protection (IMY)

To exercise any of these rights, contact us using the details below.

6. Governing law

This privacy policy and our processing of your personal data are governed by the laws of Sweden and the EU General Data Protection Regulation (GDPR).

7. Contact

For any questions about this privacy policy or to exercise your data rights, contact us at contact@petrait.eu.