Privacy Policy

doodelo ("we," "us," "our," or "Company") values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

Personal Data. Personally identifiable information, such as your name, shipping address, email address, and telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site.

Financial Data. Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase from the Site.

Image Data. Pet photos that you upload to generate AI portraits. These are processed securely and deleted after generation unless you save them to your account.

Device Data. Information about your device, such as your IP address, browser type, operating system, and referring URLs.

Ad Click Data. If you arrive at the Site by clicking one of our ads, we record the ad click identifier in the link you followed, the campaign tags on that link, the page you landed on, and your IP address and browser user agent at that visit. See Advertising Partners and Cookies below.

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

• Process your transactions and generate AI pet portraits
• Email regarding updates related to your order
• Generate a personal profile about you so that future visits to the Site will be personalized
• Increase the efficiency and operation of the Site
• Fulfill and manage purchases, orders, payments, and other transactions related to the Site
• Measure how our advertising performs, and help the platforms we advertise on show our ads to people likely to be interested in them

We may share information we have collected about you in certain situations:

• By law or to protect rights: if we believe the release of information is necessary to comply with the law
• Third-party service providers: we may share your information with parties that perform services for us, including payment processors, shipping companies, and the providers that generate and print your portrait (see Pet Photos & Image Data)
• Advertising partners: we share information about purchases with Meta Platforms, Inc., as described in Advertising Partners below
• Business transfers: your information may be disclosed as part of a merger, acquisition, or asset sale

We advertise on platforms operated by Meta Platforms, Inc., such as Facebook and Instagram. To measure whether those ads lead to purchases, and to help Meta show our ads to people more likely to be interested in them, our servers send Meta information about completed purchases through Meta’s Conversions API. We do not place Meta’s tracking pixel or any other Meta script on the Site.

What we send. For each purchase we report:

• Your email address, phone number, first and last name, city, state, ZIP code and country, and our internal identifier for your account or guest session — each converted on our servers into a one-way SHA-256 hash before it is sent
• The order’s identifier, its value (excluding tax) and currency, and the identifiers, quantities and prices of the products in it
• If you arrived from an ad click: your IP address and browser user agent from that visit, the page you landed on, and the ad click and browser identifiers described in Cookies and Similar Technologies
• The time of the purchase

Hashing. A hash turns a value such as your email address into a fixed string of characters that cannot practically be turned back into the original. Meta compares it with information it holds to match the purchase to an account; your IP address, user agent, and ad click and browser identifiers are not hashed.

When. We currently report only completed purchases shipped to addresses in the United States. We do not report orders shipped elsewhere, and we do not report the pages you browse, the portraits you create, or a checkout you do not complete.

How Meta uses it. Meta uses this information to attribute purchases to our ads, report their results to us, and improve how our ads are delivered, under its own terms and privacy policy, available at facebook.com/privacy/policy.

Your choices. You can opt out of this sharing at any time on our Your Privacy Choices page. You do not need an account. From then on we do not report your purchases to Meta. If you add your email address on that page, the opt-out also covers future orders placed with that address on any device; we keep only a one-way hash of the address, never the address itself. Without an email address, the opt-out applies to that browser, and is lost if you clear the Site’s data from it.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information from that browser, and you do not need to do anything else.

From the time you opt out. An opt-out applies from the time you make it. Information reported to Meta before then cannot be recalled.

What we keep. We keep a record of each report — which kinds of information it included, never the information itself — for about 13 months. The ad click record described in Cookies and Similar Technologies is deleted from our servers 90 days after it was last updated.

Your photos. The photos you upload and the portraits generated from them are never sent to Meta or to any other advertising partner.

We set two first-party cookies, and only for visitors who arrive at the Site by clicking an ad — a link carrying an ad click identifier such as fbclid, gclid or ttclid. If you arrive any other way, including from a link that carries only campaign tags, we set neither of them.

• _fbp — a browser identifier in Meta’s format, made of the time it was created and a random number. It lets Meta recognise the same browser across visits. Set when you arrive from any ad click. It lasts 90 days.
• _fbc — the Meta ad click identifier from the link you followed, with the time you arrived. It lets Meta connect a purchase to the ad click that led to it. Set only when you arrive from a Meta ad, and replaced if you later arrive from another. It lasts 90 days.

Both cookies are set by our own website code, not by Meta. On the same visit we also keep the ad click identifiers, the campaign tags and the page you landed on in your browser’s session storage, which is cleared when you close the tab, and send them to our servers with your IP address and browser user agent so they can be linked to a purchase. That server record is deleted 90 days after it was last updated, and a newer ad click replaces an older one.

If you opt out on Your Privacy Choices, or your browser sends a Global Privacy Control signal, we do not set these cookies, we clear any we set earlier, and we do not send the ad click record to our servers.

You can delete these cookies, or block cookies, in your browser settings at any time.

We take the security of your pet photos seriously:

• Photos are uploaded via secure SSL encrypted connections
• Photos are automatically deleted from our servers within 30 days of generation
• You can manually delete stored photos at any time from your account
• We do not use your photos or your portraits to train AI models
• Your photos and the portraits made from them are never sent to Meta or to any other advertising partner

To make and deliver your portrait, we share your photos and portraits only with the service providers that do that work for us:

• Amazon Web Services — stores your photos and portraits, and checks that each upload is a pet photo using Amazon Rekognition image analysis
• Black Forest Labs — receives the photos you upload and generates your portrait from them
• fal.ai — receives your portrait when you order a print, and increases its resolution for printing
• Gelato — receives the print-ready portrait, and prints and ships your order

We use administrative, technical, and physical security measures to protect your personal information. However, despite our best efforts, no security is impenetrable.

If you have questions or comments about this Privacy Policy, please contact us at:

Email: privacy@doodelo.com

Mailing Address: doodelo, Inc., Privacy Department