Privacy
Last updated September 27, 2026
The short version. You give us photos of you and your pet. We send them to an AI company in the United States, which uses them to make your portrait and then deletes them within an hour. We keep your photos and your portraits so you can come back for them.
We never see your card. We store your email to deliver and recover your portraits. We do not train models on your photos. We use product analytics to understand how people use the studio.
Pet Plus Us is run by NEXORALabs. If you want anything on this page explained or acted on, write to info.nexoralab@gmail.com.
What we collect
Photographs
The pictures you upload of yourself, anyone else in the frame, and your animals. These are the whole product, so we cannot make anything without them.
Only upload photos you are allowed to upload. If another person is in a picture, you are telling us you have their agreement. Please do not upload photographs of children.
Your email address
We ask for your email before creating a free preview so we can send your private link when the preview is ready. We do not send a notification just for entering your email. We reuse it at checkout and for order recovery, so you do not need to enter it again. If we already have your email for the order or remember it on this browser, we skip this field. Providing an email does not subscribe you to marketing emails. We also associate it with your visit in PostHog to understand how visits lead to orders.
When you submit your email through a form that includes our promotional-email disclosure, we also use it to send Pet Plus Us portrait offers and discounts, including offers about an unfinished preview. We keep a record of the disclosure version, your signup, and email delivery attempts. Every offer includes an unsubscribe link. Unsubscribing stops promotional emails without stopping order or delivery messages; we retain a suppression record to honor that choice.
Payment details
Handled entirely by Dodo Payments. Your card number never reaches our servers. We receive confirmation that a payment succeeded, the amount, and an identifier for the Dodo Payments customer record.
Things we deliberately do not keep
We count how often a single person uploads or asks for a preview, so that nobody can run up our costs. To do that we need to tell people apart, not to know who they are — so your IP address and email are hashed in our rate-limit records. We separately store the email address you provide for delivery and recovery.
Who else sees your data
We are a small operation and we use other companies to do the parts we do not run ourselves. Each one only receives what it needs.
| Company | What they get | Why |
|---|---|---|
| OpenAI (US) | Your photographs and portrait instructions | Checks photos for harmful content and generates your portraits. |
| Vercel (US) | Photos, portraits, the site itself | Hosting and private file storage. |
| Neon (US) | Order records | The database. |
| Trigger.dev (US) | Order identifiers | Runs the rendering jobs in the background. |
| Dodo Payments | Your payment details and email | Takes the payment. |
| Resend (US) | Your email address | Sends your portraits and order links. |
| PostHog (US) | Usage events, pages visited, clicks, session recordings, browser and device details, and the email address you provide | Tells us which parts of the product people give up on. Private order links are removed. |
| Meta (US) | That a visit, preview, checkout or purchase happened, a scrambled code for your visit, your IP address and browser, the price, and a scrambled version of your email | Measures which advertisements lead to orders. Never receives your photographs or the link to your portraits. |
If you are in the UK or the EU, this means your data is processed in the United States. We rely on the standard contractual clauses those companies publish.
What nobody does with your photos
- We do not sell them, and we do not share them for advertising.
- We do not use them to train any model.
- We do not publish them. Nothing you upload appears on this site.
- Every picture on our home page was made from invented photographs, not from a customer’s order.
How long we keep things
| What | How long |
|---|---|
| Photos you upload | Until you ask us to delete them, or you tell us the order is finished |
| Photos and prompts sent to OpenAI | Abuse-monitoring logs may be retained for up to 30 days by default, and longer where legally required or necessary to prevent harm. See OpenAI’s data controls. |
| A photo our checks reject | Deleted immediately — it is never used |
| Finished portraits | Until you ask us to delete them, so you can download them again |
| Order and payment records | As long as tax and accounting rules require |
We are honest about this one: we do not yet delete photographs automatically after a set time. Today, deletion happens when you ask us. We intend to add an automatic clear-out and we will update this page and tell customers when we do. Until then, if you would like your photos gone, email us and we will remove them.
What you can ask for
Write to us and we will do any of these, free, within 30 days:
- A copy of everything we hold about you.
- Deletion of your photographs and portraits.
- Correction of anything that is wrong.
- Deletion of your whole order record, once we no longer need it for tax.
We will need to be reasonably sure it is you asking, which usually means writing from the address you ordered with.
Cookies and advertising
We advertise on Facebook and Instagram, so Meta’s pixel runs on our home page, our order-finder and these legal pages, and it sets a cookie that lets Meta recognise a visit that came from one of our advertisements. It does not run on the pages where your order lives, so Meta never sees the link to your portraits.
We also tell Meta’s servers when a preview is viewed, when checkout opens, and when a payment clears. Every one of those carries a scrambled code standing for your visit. These events also carry your IP address and which browser you are using when available. We save those browser details with your Dodo Payments checkout or payment so we can include them when payment is confirmed. Opening checkout carries the price, and paying carries the amount that cleared. Paying also carries a scrambled version of your email address — the scrambling is one-way, but it is the format Meta uses to match a purchase to an account it already has, which is why they ask for it. We never send your photographs, the link to your portraits, or your email address in readable form.
We use local storage to remember that you have seen the site notice. A secure, HttpOnly cookie remembers a private order reference for up to 180 days so we can reuse your email on this browser; the cookie does not contain the email itself. Product analytics uses PostHog, which stores a visitor identifier in local storage and a cookie so we can recognise a returning browser, and we keep the advertising campaign that brought you in local storage for 30 days. PostHog records pages visited, clicks and session recordings of how the site is used, which can include text, form entries other than passwords, and images shown on the page. Private order links are removed from recorded URLs. When you provide an email, we attach it to your visit’s PostHog profile. Order revenue and generation cost events use pseudonymous identifiers and exclude photographs.
A cookie also remembers the language you chose for this site for up to a year, so the next page and your next visit open in the same language.
Children
This is not a service for children, and we do not knowingly collect anything from anyone under 16. Please do not upload photographs of children. If you believe a child’s photograph has been uploaded, tell us and we will delete it.
Changes
If we change how any of this works we will change this page and put a new date at the top. If the change matters, we will email customers rather than hope they check.