Privacy Policy
Last updated: 28 October 2026
Lumtrove ("we", "us") is operated by Chenhao Li, an individual seller.
What we collect
- Your two uploaded images: one of you (or another adult who has given you permission), one of the pet.
- Order details: your email, order number, and what you ordered.
- Payment details: handled by Dodo Payments. We never see your full card number.
- Basic technical data: IP address and browser info, used for security and abuse prevention.
- Consent record: the time you agreed to our terms and the upload checkbox.
How we use it
- To create your AI-generated portrait and deliver it.
- To email you about your order (order confirmation and delivery).
- To prevent fraud and resolve disputes.
We do not sell your data. We do not use your images for advertising or show them publicly without your separate written permission.
Who processes your data
| Provider | Role |
|---|---|
| OpenAI | Processes your uploaded images to generate the illustration, under terms that do not allow training on them |
| Dodo Payments | Merchant of record; handles payment, tax, and receipts under its own privacy policy |
| Cloudflare (Workers, D1, R2, Turnstile) | Hosts the site, stores order records and images privately, and blocks bots |
| Resend | Sends our transactional order emails; processes your email address and the content of those emails |
| Sentry | Error monitoring; processes error and diagnostic data from the site so we can fix problems; set up not to collect personal data |
Our service providers, including Cloudflare, OpenAI, and Dodo Payments, process your data on our behalf. Your data may be stored and accessed outside your country of residence.
How long we keep it
- Uploaded images and finished portraits are deleted automatically 30 days after payment. If an order is never paid, its photos are deleted when the order is abandoned.
- Order and consent records (order number, email, amount, times and delivery records, never your images) are kept for 2 years to handle disputes and chargebacks, then deleted. Backups are deleted after 30 days.
Security
Images are stored in private storage. Your portrait can only be opened through your private order link, and our staff can only reach images through a protected admin area. When you upload, your browser converts photos to JPEG, which removes location data (EXIF) in most cases.
Your rights
You can ask to access, correct, or delete your data at any time by emailing support@lumtrove.com. Depending on where you live (e.g. EU/UK GDPR, California CCPA), you may have additional rights, including complaining to your local data protection authority.
Children
Lumtrove is only for people 18 and older. It is not intended for anyone under 18.
Changes
We will update this page and the date above if anything changes.