Privacy & your photographs.

Effective 7 September 2026. This policy covers the current illustrations.art gift studio.

illustrations.art is operated by ITERATIVE INNOVATIONS FOR WEB-DESIGN. Dubai, United Arab Emirates. Contact: illustrationsdotart@gmail.com.

What happens to your photograph.

Choosing a photo first prepares it on your device. We remove embedded location and camera metadata before upload. Your photo is uploaded only when you confirm your permissions and processing choice and press “Create my free proof”. Google Gemini receives the photo, illustration instructions and style references to generate your artwork. A separate Gemini check compares your source photo with the result for visual quality. This is generative AI processing, not a human artist painting a commission.

We use your photo for the illustration you request. We do not publish it in a gallery, use it in advertising, sell it, or reuse it to train a model. Customer generation must use a Google project with paid-service data protections. Google’s paid-service terms say prompts and responses are not used to improve its products; limited security, abuse-prevention and legal processing may still occur. Deletion from our storage does not guarantee immediate deletion from a provider’s logs or backups.

The information needed to provide your gift.

• Your photograph, selected style, generated artwork and optional card message, to create and deliver your files. The card message is laid out in our PDF renderer; it is not sent to the image model.
• Your consent version and time, approved artwork reference and order status, to honour your choices and supply the agreed digital product.
• Your checkout email, payment reference, amount, discounts and refund status, to deliver access, process payments and resolve problems. Stripe handles card details; our application does not store full card numbers.
• Private access credentials, short-lived abuse-limit identifiers and necessary upload, generation, payment and delivery events, to secure the service and recover failed orders. We do not attach browsing histories or marketing attribution to new orders.

We ask for your consent to photo processing. Order fulfilment and support require the information needed to perform our agreement; payment records may also be retained to meet legal obligations. Where applicable law permits, proportionate fraud prevention and service security support our legitimate interests. We do not use that basis to run advertising trackers. If you do not provide the photo or processing permission, we cannot generate an illustration. The card message is optional.

Service providers and international processing.

Vercel hosts the website and processes connection and security logs. Google Firebase provides private file storage and the order database. Google Gemini creates and checks the illustration. Stripe provides checkout, fraud prevention, payments and refunds. Resend processes the recipient email and private delivery link to send transactional email. A checkout email is not a newsletter subscription.

These providers may process information in countries outside the UAE or your home country. Service-specific data-processing terms, safeguards and lawful transfer requirements apply; they are not replaced by a blanket consent to this policy. Contact us for information about the safeguards relevant to your order. Stripe also processes some information for its own legal and fraud-prevention purposes under its privacy policy.

Google Gemini terms · Firebase privacy · Vercel privacy · Stripe privacy · Resend privacy. These are links, not embedded widgets.

Private access and storage.

Gift pages use access-checked file routes and are excluded from search indexing. Your browser receives essential access cookies when you use the studio or open a private gift link. Anyone with the complete private link can access and manage that gift, including refunds and deletion. Share the downloaded card or artwork with your recipient; keep the management link private. No online service can promise absolute security.

• Unpurchased photos and proofs: access expires after 48 hours.
• Purchased source photographs: retained for 7 days after payment.
• Purchased artwork and downloads: available for 90 days after payment.
• Necessary service-event records: up to 90 days. Abuse-limit identifiers expire at the end of their limit window.
• Necessary payment, consent, refund and accounting records: up to 7 years, or longer if a specific legal hold requires it. Retaining an accounting record does not require keeping your photograph.

Access ends at expiry. Scheduled cleanup removes expired files from active storage, normally within 24 hours. You can delete files sooner from your private gift page. Downloads already saved on your device are yours to manage. Earlier-version purchases keep their original offer; contact us for help with their records.

Cookies, analytics and embeds.

With optional analytics consent, we record a random visit reference, approved campaign labels and visits to public pages. Campaign labels are attached to orders to measure preview-to-purchase performance and costs. Firebase stores these records; we do not send this analytics to advertising platforms. Visitor events are removed through scheduled cleanup after 90 days. You can withdraw permission using Analytics choices in the footer. Declining does not affect the service. Necessary operational and payment records are kept independently. We do not use advertising pixels, session recordings or embedded social feeds. See the cookie policy for storage details.

Your choices and rights.

You can withdraw photo-processing permission by deleting the files from your private gift page, or by contacting illustrationsdotart@gmail.com. A request cannot undo a generation already completed. Deleting files does not automatically refund a purchase, and required payment records may remain.

Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability or objection to processing, and complain to the relevant data-protection authority. We may ask for proportionate proof that you own the order, but do not send card details or identity documents unless specifically needed through an agreed secure method. We respond within applicable legal deadlines. If a child’s photo was supplied without appropriate permission, contact us for removal. The studio is for customers aged 18 or over.

Changes.

We date material policy changes here. A new optional processing purpose or new image provider will require an updated notice and any consent the law requires before that use begins.