PRIVACY POLICY
Last updated: March 7, 2026
1. WHO WE ARE
Sweetpea Post (“we”, “our”, “us”) operates this website and acts as the data controller for the personal data described in this policy. Our website is pets.pipefin.com. If you have questions about how we handle your data, contact us at support@pets.pipefin.com.
2. DATA WE COLLECT
| Data Type | Details |
|---|---|
| Account info | Email address, name (if provided) |
| Order info | Shipping address, order history, purchase details |
| Your child's photo | The image you upload to generate your child's invitation artwork |
| Party details | Your child's first name and age, plus the party date and venue address |
| Payment data | Processed by Stripe; we never see or store your card details |
| Usage data | Pages visited, IP address, browser type, device info |
| Marketing data | Ad interaction data via Meta Pixel (only with your consent) |
3. HOW WE USE YOUR DATA
| Purpose | Legal Basis (GDPR) |
|---|---|
| Fulfilling your order (AI generation, printing, shipping) | Contract performance (Art. 6(1)(b)) |
| Processing payment | Contract performance (Art. 6(1)(b)) |
| Generating your child's invitation artwork from an uploaded photo and party details | Contract performance (Art. 6(1)(b)) |
| Sending order updates and transactional emails | Contract performance (Art. 6(1)(b)) |
| Fraud prevention (via Stripe) | Legitimate interest (Art. 6(1)(f)) |
| Advertising measurement (Meta Pixel) | Consent (Art. 6(1)(a)) |
4. YOUR CHILD'S PHOTO & AI GENERATION
The photo you upload is used solely to generate your child's custom invitation artwork. Specifically:
- Your photo is sent to our AI image provider, currently xAI, solely to generate the artwork
- We do not use your child's photo to train AI models
- We do not share your child's photo with third parties beyond what is necessary to fulfill your order
- We do not create, compute or store any face embedding, face template, or other biometric identifier from your child's photo — the photo is used only as an image reference for the AI provider, never to uniquely identify your child
- Uploaded photos and generated artwork are retained only for the limited windows set out in the Data Retention Schedule below, then deleted
5. THIRD-PARTY SERVICE PROVIDERS
We share data with the following processors to operate our service:
- Stripe – Payment processing and fraud prevention. Stripe may collect device and behavioural data for fraud detection. Stripe Privacy Policy
- Prodigi – Print fulfillment and shipping. Receives your shipping address and order details. Prodigi Privacy Policy
- xAI – AI image generation. This is our currently active AI provider and receives your child's uploaded photo to produce the invitation artwork. xAI Privacy Policy
- Meta (Facebook) – Advertising measurement via Meta Pixel. Only activated with your consent. Meta Privacy Policy
- Resend – Transactional email delivery. Receives your email address for order notifications.
For users in the EU/UK: international transfers to US-based processors are made under Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR.
6. YOUR RIGHTS
Under GDPR and applicable data protection laws, you have the right to:
- Access – Request a copy of the personal data we hold about you and your child
- Rectification – Correct any inaccurate or incomplete data
- Erasure – Request deletion of your, or your child's, personal data (“right to be forgotten”)
- Restriction – Request that we limit processing of your data
- Portability – Receive your data in a portable, machine-readable format
- Objection – Object to processing based on legitimate interest
- Withdraw consent – Revoke marketing consent at any time via our cookie settings or by contacting us
How an erasure request works
Email support@pets.pipefin.com from the address on your account, or provide your order number, so we can verify the request belongs to you. Once verified, and within 30 days, we:
- Delete every item marked “deleted immediately” in the retention schedule below — including your child's uploaded photo and generated artwork
- Anonymise every text field that carries your child's name — draft party details, saved wording snapshots, and the name used for generation alike — replacing it with a placeholder
- Record an audit entry proving each deletion took place
- Tell you which items, if any, we must keep — for example a purchased order's accounting records — and why
7. DATA RETENTION SCHEDULE
The table below is generated from our live configuration, so the figures here always match how the system actually behaves.
| Category | What it is | No purchase | After purchase | On your erasure request |
|---|---|---|---|---|
| Your child's uploaded photograph | The photo you upload to create your child's invitation | 7 days | 30 days | Deleted immediately, and the deletion is audited |
| Background-removed intermediate | A working copy created briefly while composing the artwork | 24 hours | 24 hours | Deleted immediately, and the deletion is audited |
| Generated artwork | The AI-generated illustration made from your child's photo | 7 days | 30 days | Deleted immediately, and the deletion is audited |
| Preview images | Low-resolution previews shown while you design the invitation | 7 days | 30 days | Deleted immediately, and the deletion is audited |
| Composed invitation file | The print-ready PDF of your invitation | 7 days (re-set to 90 days once approved) | 7 years | Deleted immediately unless it was purchased, in which case it is retained for accounting purposes and the reason is disclosed to you |
| Party details (draft) | Your child's name, age, party date and venue address, while you're still editing | 30 days | 30 days | Anonymised immediately — every field is replaced with a placeholder |
| Party details (saved version) | A snapshot of the wording used to produce a specific approved or purchased version | 30 days | 7 years | Anonymised immediately unless the version was purchased or is bound to a live approval, in which case it is retained and the reason is disclosed to you |
| Approval record | A record of who approved a print-ready file and when — no image, no child's name | 90 days | 7 years | Retained while its window runs; the reason is disclosed to you |
| Order and payment records | Your order, payment and consent records | Not applicable | 7 years | Retained — required for statutory accounting; the reason is disclosed to you |
| Child's name and age used for generation | The specific first name and age used to generate the artwork | 30 days | 30 days | Anonymised immediately |
| Generation cost and model metadata | Which AI model was used, its cost and technical parameters — no photo, no name | 13 months | 13 months | Retained — carries no name once the entry above is anonymised |
| Abandoned draft | A draft you started and never returned to | 48 hours | Not applicable | Deleted immediately |
| Deletion audit record | Proof that a deletion happened — no image, no filename, no identity | 7 years | 7 years | Retained — it is the proof of erasure itself |
Order, payment and consent records are retained for accounting purposes for the statutory period shown in the purchase row above, regardless of any erasure request affecting the creative material tied to that order.
8. COOKIES & TRACKING
We use cookies and similar technologies for site functionality and, with your consent, for advertising measurement. For full details, see our Cookie Policy.
EU/UK users: marketing cookies require your explicit opt-in consent. You can change your cookie preferences at any time using the cookie settings link in our website footer.
9. CALIFORNIA RESIDENTS (CCPA)
We do not sell or share personal information as defined by the California Consumer Privacy Act (CCPA). California residents may contact us to request information about our data practices. You can also use the “Do Not Sell or Share My Personal Information” link in our footer at any time.
10. CHILDREN'S PRIVACY
Our service exists to create personalised party invitations featuring your child, so — unlike most consumer services — we do knowingly and directly process a child's photo, first name and age. That data is submitted by you, the parent or guardian, as part of placing an order; we do not collect it directly from a child, and the account holder is always an adult.
Because this data concerns a child, we hold it to a higher standard than the rest of this policy:
- We never create, compute, or store a face embedding, face template, or any other biometric identifier from your child's photo
- Every retention window for a child's photo and party details is short by default, and is set out in full in the Data Retention Schedule above
- You can request immediate deletion or anonymisation of your child's data at any time — see How an erasure request works above
- We do not use your child's photo or details for anything beyond producing the invitation you ordered
If you believe a child submitted this data without a parent or guardian's involvement, contact us at support@pets.pipefin.com and we will delete the photo, artwork and party details immediately, in line with the retention schedule above.
11. DATA SECURITY
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), secure cloud storage, and access controls. However, no method of transmission over the internet is 100% secure.
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top of this page indicates when the policy was last revised.
13. CONTACT & COMPLAINTS
For any privacy-related questions or to exercise your rights, email us at support@pets.pipefin.com.
EU/UK users have the right to lodge a complaint with their national data protection supervisory authority if they are unsatisfied with how we handle their data.