Privacy Policy

Last updated: 6 November 2026

PaintBy ("we", "us") turns your photos into illustrated portraits you can print and paint. This policy explains what we do with your data, in plain words.

Who is responsible

Contact: hello@paintby.art

What we collect

  • The photo you upload and the portrait we generate from it.
  • A pseudonymised identifier of your connection (a one-way code derived from your IP address) to apply the daily limit of free portraits and prevent abuse.
  • Basic technical data (browser type, pages visited) through cookie-free analytics. We do not use advertising or tracking cookies.

We do not ask for your name, email or payment details to use the free tool.

Why we use it

  • To create your portrait and let you download it. Legal basis: your consent, given when you tick the checkbox before uploading.
  • To apply the daily limit and keep the service secure. Legal basis: our legitimate interest in preventing abuse.
  • To understand how the site is used and improve it, using anonymous statistics. Legal basis: our legitimate interest.

Your photo

  • Your photo is used only to generate your portrait. We do not publish it, sell it or share it with anyone else.
  • Your photo and your portrait are deleted automatically after 24 hours.
  • Only upload photos of yourself, or of people who have given you permission. For children under 14, you must be their parent or legal guardian or have their permission.

Who processes your data for us

  • Supabase (servers in the European Union): stores your photo and portrait during those 24 hours.
  • OpenAI (United States): generates the illustration from your photo. Data sent through OpenAI's API is not used to train its models by default, and OpenAI may keep it for a limited time for abuse monitoring, according to its own policies. Transfers to the US are covered by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
  • Lovable (hosting of this website).

How long we keep data

  • Photos and portraits: 24 hours.
  • Connection identifier for the daily limit: up to 30 days.
  • Anonymous statistics: they do not identify you.

Your rights

You can ask to access, correct or delete your data, object to or restrict its use, and withdraw your consent at any time, by writing to hello@paintby.art. We will answer within one month. If you are not satisfied, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Changes

If we change this policy, we will update the date at the top of this page.