Privacy Policy

1. Who we are and what this covers

Expert Net Digital LLC operates ImagiTails and is responsible for the information it handles through the website and ChatGPT plugin. Contact us at support@imagitails.com for privacy questions or requests.

This notice covers ImagiTails, not your entire ChatGPT account. OpenAI handles your ChatGPT conversations, source photos and image generation under its own Privacy Policy and your account settings. Deleting data with ImagiTails does not delete your ChatGPT history or Library.

2. Information we receive

• Images. You attach source photos in ChatGPT, not in our widget. The plugin asks ChatGPT to send all generated images and revisions to us automatically for optional printing, including when you never buy. ChatGPT may omit an image or mistakenly send a source photo. Received files may contain information visible in the image or embedded in the file.
• Plugin activity. We receive tool inputs such as selected styles and gallery hints about animals, portrait themes and preferences. These can be based on context ChatGPT supplies. We receive keyed hashes of available ChatGPT user and chat identifiers to group images, retrieve printing options and maintain gallery behavior. These are pseudonymous identifiers, not a guarantee of anonymity. We do not need your full chat transcript, but information included in a tool call can reach us.
• Order information. We store received-image metadata, print choices, preview approval, order and payment references, totals and status. Stripe collects payment details, contact information and shipping information at checkout. We do not receive your full payment-card number through our checkout integration.
• Support and technical information. We receive information you send to support. Our hosting and payment providers also process connection and device information, such as IP address and browser details, to deliver and protect their services.

3. How information is used

We use information to show and rank styles, group and display received portraits, prepare print previews, process payments, fulfill orders, answer requests and investigate errors, fraud or disputes. Authorized operators may view images when reviewing an order or handling support. We also retain information needed to meet applicable legal obligations.

Customer images are not public catalog examples. We do not use customer images for advertising or a public gallery without separate optional permission. The proposed service does not sell personal information or use it for cross-context behavioral advertising. ImagiTails does not train AI models on customer images. These statements do not control OpenAI’s processing of content you provide to ChatGPT; use OpenAI’s settings and notice for that processing.

4. Who receives information

• Cloudflare: hosts the website and plugin backend, private image storage and structured records. Gallery hints may also be processed by Cloudflare Workers AI for relevance ranking where enabled. See Cloudflare’s privacy notice.
• Stripe: processes checkout, payments and related fraud prevention. It has its own responsibilities for some processing. See Stripe’s privacy notice.
• Print and delivery providers: when paid fulfillment is enabled, the selected supplier and its production and delivery partners need print files, delivery details and order information. Prodigi is the proposed supplier; its privacy notice and data processing terms describe its practices. Final provider selection remains a launch requirement.
• Other necessary recipients: authorized support providers, professional advisers or authorities where reasonably necessary for support, legal obligations or protecting rights. A business transfer may involve relevant records subject to applicable safeguards and notice requirements.

Any additional image-upscaling or email provider must be identified and reviewed before activation. Providers may process information outside your state or country. We must verify the applicable contracts and transfer safeguards before live paid processing; storage is not represented as exclusively US-based.

5. How long information is kept

Unpaid images and print sessions: the approved retention period is seven days. Current cleanup uses session inactivity and record age; it runs periodically and preserves records linked to payments or unresolved payment matching. It is not a promise that every byte disappears exactly seven days after upload. Removing a portrait from an order hides it; it does not immediately erase it.

Gallery records: gallery ordering and activity records are scheduled for cleanup after 90 days. A separate record used to remember whether the first-use introduction was dismissed currently has no automatic expiry; its final retention period must be settled before publication.

Paid images: the planned policy is to delete chosen images and print files 90 days after delivery, except narrowly documented unresolved support cases. That delivery-based deletion process is not yet implemented, and this draft does not represent it as active.

Other records: final schedules for cancelled and refunded orders, support correspondence, transaction records, security logs and backups remain under review. Necessary accounting records do not justify retaining images indefinitely. Providers have separate retention and backup cycles; we cannot promise immediate deletion from all systems.

6. Browser storage and tracking

The order page uses your browser’s session storage for its theme preference and checkout continuity, including access information for your print session. Clearing browser storage can interrupt that access. The two legal pages do not load analytics, advertising scripts or third-party fonts.

We have not implemented a site-wide response to Do Not Track or Global Privacy Control signals in this development version. The planned service does not sell or share personal information for cross-context advertising. Before launch we will verify the complete cookie and tracking inventory, third-party behavior and any legally required opt-out or consent controls. Stripe and ChatGPT have their own storage and tracking practices when you use their services.

7. Your choices and privacy requests

You can request access to, correction of or deletion of information held by ImagiTails by emailing support@imagitails.com. Describe the request and include an order number if you have one. Do not send your full card number, a private order link or identity documents unless we request a necessary, secure verification step. We may need proportionate information to verify that the records belong to you, especially where there is no order or email associated with a chat.

Depending on applicable law, you may also have rights to a portable copy, to object to or restrict processing, to withdraw consent, to appeal a request decision or to complain to a regulator. We will explain any lawful reason we cannot fully fulfill a request. Exercising applicable privacy rights will not result in unlawful discrimination. An authorized agent may contact us; we may verify their authority.

Deleting an image needed for an unfinished print can prevent fulfillment. We will explain the consequences and any records that must be retained. Removing an image from your order or deleting a ChatGPT chat is not a deletion request to ImagiTails. Marketing permission is optional and separate from ordering; you can withdraw it by contacting us.

8. Protecting information

Received images are kept in private storage, with access limited for the service and authorized operations. Private print links grant access to associated images to anyone who holds them while valid. Do not share them publicly. No online system is perfectly secure, and we cannot guarantee absolute security.

9. Children

ImagiTails is not intended for children under 13. Older minors must meet ChatGPT’s requirements and have parent or guardian permission; an adult must place a paid order. If you believe a child under 13 provided personal information to ImagiTails, contact us so we can investigate and take appropriate action. An age statement does not replace our obligations when we learn we have received a child’s information.

10. Updates to this notice

This is a prelaunch review draft, last revised November 5, 2026. We will set an effective date when the notice is finalized, publish updates here and provide additional notice or obtain consent when required for material changes. Questions and requests go to support@imagitails.com.