Privacy Policy
This policy explains what we do with your personal data — in particular the photograph you upload, which is the most sensitive thing we handle.
Who is responsible for your data
The data controller is:
Kamlesh Patel, trading as Keyframe LabsContact: hello@keyframesaga.com
What we collect, why, and on what basis
| Data | Why | Lawful basis |
|---|---|---|
| Photograph of a face | To generate your anime character | Performance of our contract with you |
| Name, email, delivery address, phone | To take payment, make and deliver your order, and keep you updated | Performance of our contract with you |
| Order and payment records | Accounting, tax and dealing with any dispute | Legal obligation; our legitimate interest in defending claims |
| Email address for marketing | To tell you about new Chapters | Your consent — which you can withdraw at any time |
| Analytics about how you use the site | To understand and improve the site | Your consent, via the cookie banner |
About your photograph
We use your photograph for one purpose only: generating the artwork for your order. We do not use facial recognition, we do not try to identify you from it, and we do not use it to train any model.
It is stored in a private, access-controlled bucket — never on a public URL. It is sent to Google's Gemini API to produce the artwork, and is not used by Google to train their models under the terms that apply to that API. If the Gemini API is unavailable, we may instead send a temporary, expiring link to the photograph to Replicate, which runs a Google model on our behalf to read the facial features.
When you upload a photograph you confirm that it is of you, or that the person in it has agreed to it being used this way. If the person is under 16, you confirm you are their parent or guardian.
We publish your photograph or your finished artwork only if you explicitly tick the sharing option at checkout. That is off by default. You can withdraw it at any time by emailing us, and we will remove the image from anywhere we have used it.
Who we share data with
- Stripe — payment processing. They receive your payment and contact details; we never receive your card number.
- Prodigi — printing and shipping. They receive your name, delivery address and the finished artwork file.
- Supabase — database and file storage (hosted in the EU).
- Vercel — website hosting.
- Google (Gemini API) — artwork generation.
- Replicate — a fallback route for reading facial features if the Gemini API is unavailable, and background removal on the generated character.
- Resend — sending your order emails (hosted in the EU).
- PostHog — website analytics, only if you accept analytics cookies (hosted in the EU).
We never sell your data. Some of these providers may process data outside the UK/EEA; where they do, transfers are covered by the UK International Data Transfer Addendum or Standard Contractual Clauses.
How long we keep it
- Uploaded photographs: kept while we make and ship your order, and afterwards only so we can remake your item if something goes wrong. Email us at any time and we will delete your photograph within one month.
- Generated artwork: kept so we can reissue your download link if you lose it. Email us and we will delete it within one month.
- Order and payment records: 6 years, as UK tax law requires.
- Marketing email address: until you ask us to remove it — email us and we will do so within one month.
Your rights
Under UK GDPR you have the right to:
- Ask for a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data deleted, where we have no ongoing need for it.
- Object to, or ask us to restrict, how we use it.
- Receive your data in a portable format.
- Withdraw consent at any time, where consent is the basis we rely on.
Email hello@keyframesaga.comand we will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
Essential cookies keep your basket and session working — these are always on, because the site cannot function without them. Analytics cookies only run if you accept them in the banner. Your choice is stored in your browser, so you can change your mind at any time by clearing this site's data (cookies and local storage) in your browser settings.
Children
This site is not intended for under-16s and we do not knowingly sell to them. If you are a parent or guardian and believe your child has uploaded a photograph, email us and we will delete it.
Changes
If we change this policy we will update the date at the bottom of this page. Material changes affecting how we use your photograph will be emailed to affected customers.