Privacy Policy

Petohra allows users to create AI-generated fantasy cards based on photographs of their pets, purchase credits and download digital artwork.

This Privacy Policy explains which personal data we collect, why we use it, who we share it with, how long we retain it and the rights you have regarding your personal data.

This Privacy Policy applies when you visit the Petohra website, create an account, upload photographs, generate AI pet cards, purchase credits, download digital content or contact us.

Petohra is the controller responsible for the processing of personal data described in this Privacy Policy.

Petohra is a sole proprietorship registered with the Dutch Chamber of Commerce under number 89384113. VAT number: NL004723226B28.

For privacy questions or requests, contact us at petohra.business@gmail.com.

Account information: your email address, account identifier, login-related information and account settings.

Pet and card information: uploaded pet photographs, pet names, selected traits, gender selections, card type, aura or power selections, prompts, generated images and completed card files.

Purchase information: purchased credits, credit balance, payment references, payment status, transaction history and pricing information.

Communications: messages, support requests, complaints, refund requests and other information you send to us.

Technical information: IP address, browser type, device information, timestamps, security information, error logs and information about how the website is used.

We do not directly store your complete payment card number or card security code.

We collect personal data directly from you when you create an account, upload photographs, generate AI pet cards, purchase credits, download digital content or contact us.

Some technical information is collected automatically when you use the website.

We may also receive information from trusted service providers, such as confirmation from Stripe that a payment has been completed successfully.

We use account information to create and manage your account, authenticate you and provide access to your purchased digital content.

We use uploaded photographs, prompts and selections to generate your requested AI pet cards.

We use generated cards to make them available for download through your account.

We use payment information to process purchases, manage credit balances, prevent fraud, issue refunds where applicable and comply with legal accounting obligations.

We use communications to respond to questions, investigate complaints and provide customer support.

We use technical and security information to operate the website, diagnose errors, protect accounts, prevent fraud or abuse and improve the reliability of our services.

We may also process personal data where necessary to comply with legal obligations or establish, exercise or defend legal claims.

Performance of a contract: we process personal data where necessary to provide the products and services you request, including account access, AI card generation, digital downloads and payment processing.

Legal obligations: we may retain and process certain transaction, tax, accounting and compliance information where required by law.

Legitimate interests: we may process limited technical, security and usage information to secure Petohra, prevent fraud, investigate misuse, resolve errors and improve the service. We consider whether these interests are outweighed by your rights and interests.

Consent: where legally required, we rely on your consent, for example for non-essential cookies, marketing communications or another optional use that is clearly explained before consent is requested.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing that took place before consent was withdrawn.

Uploaded photographs are used to provide the card-generation service you request.

You should upload only photographs that you own or are authorized to use. Avoid uploading photographs that unnecessarily reveal personal or sensitive information about people.

Photographs may be shared only with the service providers necessary to process, generate and securely store your requested AI-generated content.

We do not claim ownership of the photographs you upload.

The photographs and selections you provide may be processed by an artificial intelligence service to generate your requested artwork.

Generated artwork, card details and completed card files may be stored so they remain available through your account for future access and download.

Generated cards may be associated with your account identifier, card settings, payment status and creation date.

We do not use your private generated cards for advertising or public promotion without your separate permission.

Payments are processed by Stripe. Stripe may collect and process payment details, billing information, device information and fraud-prevention information.

Petohra normally receives transaction information such as the payment status, amount, currency, Stripe reference and limited customer information. We do not receive or store your complete payment-card details.

Stripe may process personal data as a processor, an independent controller or both, depending on the particular payment service and processing activity.

Stripe handles personal data in accordance with its own terms and privacy documentation.

We use trusted third-party service providers to help operate Petohra. These may include providers for account authentication and database services, image storage, artificial intelligence processing, payment processing and website hosting.

These service providers process personal data only where necessary to provide their services on our behalf or to fulfil their own legal obligations.

Some providers, such as Stripe, may act as independent data controllers for certain processing activities in accordance with their own privacy policies and applicable law.

We may change, replace or add service providers where reasonably necessary to operate and improve Petohra. If such changes materially affect how we process your personal data, we will update this Privacy Policy accordingly.

Some service providers may process or store personal data outside the Netherlands or outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we seek to use a lawful transfer mechanism, such as an adequacy decision, approved Standard Contractual Clauses or another safeguard permitted under applicable data-protection law.

You may contact us for more information about the safeguards relevant to your personal data.

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Account information is generally retained while your account remains active and may be removed or anonymized after the account is deleted, unless continued retention is legally required.

Uploaded photographs and generated digital content may be retained while they remain associated with your account so that you can access and download them.

If you delete a card or request account deletion, associated content will be scheduled for deletion where technically and legally possible. Temporary backups may remain for a limited period before being overwritten.

Payment, order, invoice, tax and accounting information may be retained for the applicable statutory retention period.

Support messages and complaints may be retained for as long as necessary to resolve the matter, prevent repeated abuse and establish, exercise or defend legal claims.

Security and technical logs are retained only for a limited period unless they are required to investigate fraud, misuse, security incidents or legal claims.

Petohra may use necessary cookies or similar technologies to keep you signed in, maintain website functionality, protect the service and remember essential settings.

Necessary technologies may be used without optional consent where they are strictly required to provide the website or a service you requested.

If Petohra uses non-essential analytics, personalization or marketing cookies, we will request consent where required before placing or accessing those cookies.

You can manage available cookie preferences through the cookie settings provided on the website, where applicable.

We take reasonable technical and organizational measures intended to protect personal data against unauthorized access, accidental loss, alteration, disclosure or destruction.

These measures may include authenticated accounts, access controls, encrypted connections, restricted service credentials, database-security rules and monitoring for technical errors or abuse.

No website, transmission method or storage system can be guaranteed to be completely secure. You are responsible for protecting your login credentials and should contact us if you suspect unauthorized access to your account.

Depending on the applicable law, you may have the right to request access to the personal data we hold about you.

You may have the right to request correction of inaccurate or incomplete information.

You may have the right to request deletion of your personal data.

You may have the right to request restriction of processing or object to certain processing.

You may have the right to receive certain personal data in a structured, commonly used and machine-readable format and to transmit that data to another organization.

Where processing is based on consent, you may withdraw that consent at any time.

These rights are not absolute. A request may be limited where continued processing is necessary to meet a legal obligation, protect the rights of others, prevent fraud or establish, exercise or defend legal claims.

To exercise a privacy right, email petohra.business@gmail.com and clearly describe your request.

We may ask for information needed to verify your identity before responding. We will use that information only to verify and handle your request.

We aim to respond within the period required by applicable data-protection law. We will inform you if additional time is legally permitted and necessary.

You will not normally be charged for exercising your privacy rights. A reasonable fee may apply where permitted by law if a request is manifestly unfounded, excessive or repeatedly submitted.

If you have concerns about how we handle personal data, please contact us first at petohra.business@gmail.com so that we can investigate.

You also have the right to submit a complaint to the Autoriteit Persoonsgegevens, the Dutch data-protection authority, or to another competent supervisory authority in your country of residence.

Petohra is not intended to be purchased independently by children.

Users under 18 may use the service only with the permission and supervision of a parent or legal guardian.

If you believe that a child has provided personal data without appropriate permission, contact us so that we can investigate and take appropriate action.

Artificial intelligence is used to create artistic card images based on the content and selections you submit.

This generation process does not make legal or similarly significant decisions about you.

Payment providers may use automated systems to detect and prevent fraud. Their own privacy documentation explains how those systems operate and which rights may apply.

We may update this Privacy Policy when Petohra, our service providers, our processing activities or applicable legal requirements change.

The latest version will be published on this page with an updated effective date.

Where appropriate, we may provide additional notice of material changes through the website or your registered email address.

For privacy questions, data requests or complaints, contact Petohra at petohra.business@gmail.com.

Petohra is registered with the Dutch Chamber of Commerce under number 89384113. VAT number: NL004723226B28.