YOUR PHOTOS STAY YOURS

Privacy Policy

Draft for launch · September 26, 2026

We use uploaded photos to make the edits you order and deliver them privately. We do not post customer photos or results in public galleries or advertisements without separate permission.

Information we collect

For an order, we collect the buyer's email address, the uploaded photo, selected ideas and any custom idea, referral source when present, and technical details needed to run the service. We also receive payment status, purchase identifiers, membership status, and limited billing information from Stripe. We do not receive full card numbers. Contact messages may include the information you choose to send.

How we use it

We use this information to validate requests, process payments, create edited images, send private download links and membership notices, prevent abuse, respond to support and privacy requests, and keep essential business records. We do not sell personal information or use order photos for targeted advertising.

Who processes it

GoDaddy hosts the site and private order files. Stripe handles checkout and subscriptions. OpenAI receives the photo and selected edit instructions to create the images and screen for disallowed content. Resend handles transactional email. These providers process information under their own terms and privacy notices. We share only the information needed for each task.

How long we keep it

Unpaid uploads are scheduled for deletion after 24 hours. Private download links expire 7 days after delivery. We delete original photos and finished images from active storage within 24 hours after that expiry, and promptly after a final rejection. Provider backups may retain copies for a limited additional period under the provider backup schedule. Essential order and payment records may be kept longer for accounting, fraud prevention, disputes, and legal obligations. We do not retain full card details.

Security

We use HTTPS, restrict public access to uploaded files, and issue long random links for private downloads. No internet service is perfectly secure; do not upload a photo you are unwilling to have processed by the listed providers.

Your choices and requests

You can ask us to access or delete order information, report a photo used without permission, or ask for a download link to be revoked through our contact form. We may need to verify your identity or retain records required by law. A person shown in a photo can also use the contact form to request removal. To manage or cancel a membership, use the secure billing link sent by email or contact us.

Cookies and tracking

We do not use advertising cookies on Punkthem.com. Stripe may use cookies on its hosted checkout under its own privacy policy. Our hosting provider may record standard security and access logs.

Children

The service is for adults only. Do not upload photos showing anyone under 18. If we learn a minor's photo was submitted, we will stop processing and delete it, subject to any legally required records.

Changes and contact

We may update this notice if our practices change. The date above shows the current version. Send privacy questions and requests through our contact form.