Privacy Policy

Data Controller

The data controller for Pettrait is NCREATE PTE. LTD., a company registered in Singapore. If you have questions about your data, please contact our Data Protection Officer at dpo@pettrait.xyz.

Data We Collect

We collect the following categories of data: (a) Account data: email address, authentication method, account preferences, and usage history. (b) Uploaded content: photos you upload for generation, including selfies and pet images. (c) Generated content: works created by the service. (d) Transaction data: order records, payment status, credit balance history, and payment method type. (e) Technical data: IP address, browser type, device information, operating system, and log data. (f) Communication data: support messages, data requests, and correspondence. (g) Cookies and similar technologies: see our Cookie Policy.

Pettrait uses email verification codes for login. We do not store plain-text passwords. We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.

Legal Bases for Processing (EEA and UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal bases: (a) Performance of a contract: to provide the generation service, process payments, and maintain your account. (b) Legitimate interests: to improve the service, prevent abuse, and ensure security. (c) Consent: where we rely on your consent, you may withdraw it at any time by contacting us. (d) Legal obligation: to comply with applicable laws and regulations.

How We Use Data

We use your data for the following purposes: (a) To provide and maintain the Pettrait generation service. (b) To process payments and maintain credit balances. (c) To prevent abuse, fraud, and unauthorized access. (d) To provide customer support and respond to inquiries. (e) To improve, troubleshoot, and optimize the product. (f) To comply with legal, regulatory, and accounting obligations. (g) To communicate with you about service-related matters.

Uploaded images are processed solely for the purpose of completing your requested generation tasks and are not used to train or improve AI models unless explicitly stated and separately consented to.

Data Sharing and Third Parties

We may share your data with the following categories of third-party service providers: (a) AI generation providers: such as OpenAI, for the purpose of generating works based on your inputs. (b) Payment processors: such as Airwallex or other providers, for payment processing. Payment card information is handled directly by these providers; Pettrait does not store complete payment card numbers. (c) Cloud storage providers: for storing uploaded images and generated works. (d) Email service providers: for sending authentication codes and service notifications. (e) Analytics providers: to understand product usage and performance. (f) Infrastructure and hosting providers: for service operation and security.

We require all third-party providers to implement appropriate technical and organizational measures to protect your data. We do not sell your personal data to third parties.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including Singapore, the United States, and other jurisdictions where our service providers operate. When we transfer data from the EEA, UK, or other jurisdictions with data protection laws, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) adopted by the European Commission or equivalent transfer mechanisms.

Data Retention

We retain your data for as long as necessary to provide the service and fulfill the purposes described in this policy. Specific retention periods: (a) Account data: retained until account deletion or prolonged inactivity. (b) Uploaded photos: retained until your generation task is complete and may be deleted shortly thereafter, unless retained for support or abuse prevention purposes. (c) Generated works: retained in your account for your access. (d) Transaction records: retained for at least 5 years for accounting and tax compliance. (e) Support and data request records: retained for 3 years after resolution. (f) Log data: retained for up to 12 months.

Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, regular security assessments, and employee training. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on your jurisdiction, you may have the following rights: (a) Right to access: request a copy of the personal data we hold about you. (b) Right to rectification: request correction of inaccurate data. (c) Right to erasure: request deletion of your personal data, subject to legal retention requirements. (d) Right to restrict processing: request limitation of how we use your data. (e) Right to data portability: request transfer of your data to another service provider. (f) Right to object: object to processing based on legitimate interests. (g) Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise your rights, please submit a Data Request or contact our Data Protection Officer at ${dpo}. We will respond within the timeframes required by applicable law.

Children's Privacy

Pettrait is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete such data.

California Privacy Rights

If you are a resident of California, USA, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. You have the right to know what personal information we collect, use, and share. You have the right to request deletion of your personal information. You have the right to opt out of the sale of your personal information — Pettrait does not sell personal information. You have the right to non-discrimination for exercising your CCPA rights. To exercise your CCPA rights, please contact us at ${dpo}.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Pettrait website and, where appropriate, by email. Your continued use of Pettrait after the effective date of the updated policy constitutes acceptance of the changes.

Contact Us

Operator and Data Controller: NCREATE PTE. LTD.

Support: support@pettrait.xyz

Data Protection Officer: dpo@pettrait.xyz