Privacy Policy

This policy explains what we do with your personal data — in particular the photograph you upload, which is the most sensitive thing we handle.

Who is responsible for your data

The data controller is:

Kamlesh Patel, trading as Keyframe Labs
29 Earlswood Road
Leicester
PLACEHOLDER — postcode
United Kingdom

Contact: hello@keyframesaga.com

What we collect, why, and on what basis

Data	Why	Lawful basis
Photograph of a face	To generate your anime character	Performance of our contract with you
Name, email, delivery address, phone	To take payment, make and deliver your order, and keep you updated	Performance of our contract with you
Order and payment records	Accounting, tax and dealing with any dispute	Legal obligation; our legitimate interest in defending claims
Email address for marketing	To tell you about new Chapters	Your consent — which you can withdraw at any time
Analytics about how you use the site	To understand and improve the site	Your consent, via the cookie banner

About your photograph

We use your photograph for one purpose only: generating the artwork for your order. We do not use facial recognition, we do not try to identify you from it, and we do not use it to train any model.

It is stored in a private, access-controlled bucket — never on a public URL. It is sent to Google's Gemini API to produce the artwork, and is not used by Google to train their models under the terms that apply to that API.

We publish your photograph or your finished artwork only if you explicitly tick the sharing option at checkout. That is off by default. You can withdraw it at any time by emailing us, and we will remove the image from anywhere we have used it.

Who we share data with

Stripe — payment processing. They receive your payment and contact details; we never receive your card number.
Prodigi — printing and shipping. They receive your name, delivery address and the finished artwork file.
Supabase — database and file storage (hosted in the EU).
Vercel — website hosting.
Google (Gemini API) — artwork generation.
Resend — sending your order emails (hosted in the EU).
PostHog — website analytics, only if you accept analytics cookies (hosted in the EU).

We never sell your data. Some of these providers may process data outside the UK/EEA; where they do, transfers are covered by the UK International Data Transfer Addendum or Standard Contractual Clauses.

How long we keep it

Uploaded photographs: deleted 90 days after your order is completed. We keep them that long only so we can remake your item if something goes wrong in production.
Generated artwork: kept for 12 months so we can reissue your download link if you lose it.
Order and payment records: 6 years, as UK tax law requires.
Marketing email address: until you unsubscribe.

Your rights

Under UK GDPR you have the right to:

Ask for a copy of the personal data we hold about you.
Have inaccurate data corrected.
Have your data deleted, where we have no ongoing need for it.
Object to, or ask us to restrict, how we use it.
Receive your data in a portable format.
Withdraw consent at any time, where consent is the basis we rely on.

Email hello@keyframesaga.comand we will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

Essential cookies keep your basket and session working — these are always on, because the site cannot function without them. Analytics cookies only run if you accept them in the banner. You can change your mind at any time by clearing the site's cookies in your browser.

Children

This site is not intended for under-16s and we do not knowingly sell to them. If you are a parent or guardian and believe your child has uploaded a photograph, email us and we will delete it.

Changes

If we change this policy we will update the date at the bottom of this page. Material changes affecting how we use your photograph will be emailed to affected customers.