Privacy

What we collect

When you use Pentimento we collect: your email address (when given), the prompts you submit, the images we generate from those prompts, your order details, your shipping address (at checkout, via Stripe), and standard analytics about how you use the site. If you sign in via Google through Clerk, we receive your email and name from that flow.

How we use it

To deliver the product you ordered. To send order updates and shipping confirmations. To improve generation quality and the site experience. To send occasional marketing emails to people who explicitly opt in (you can unsubscribe at any time). We do not sell your data.

AI generation

Pentimento generates images using third-party image-generation models accessed via API. Your prompts are sent to those providers (currently Google Gemini and fal.ai for primary generation, with Higgsfield used for separate marketing imagery). Provider data-handling is governed by their terms; none of our current providers train on customer prompts in the default API tier we use.

We retain generated images server-side so you can refine, variate, and order them after your initial generation. You can request deletion of your prompts and generated images at any time using the contact below.

Who we share with

Stripe (for payment processing). Gelato (for print fulfillment and shipping). Resend (for transactional and marketing email). Vercel (for hosting). Neon (for the database). Cookies for authentication and cart persistence are stored in your browser.

Cookies

We use cookies for authentication, cart persistence, free credit tracking for anonymous visitors, and basic analytics. You can disable cookies in your browser, though parts of the site (cart, checkout, your free credits) will not work without them.

Retention

Order records are retained for as long as required by tax and consumer-protection law (typically 7 years). Prompts and generated images are retained while your account is active and for 30 days after deletion request. Anonymous browsing and cart data are stored in your browser only.

Your rights

Under the EU GDPR, UK GDPR, and California CCPA, you have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to processing. To exercise any of these rights, email hello@pentimento.art. We respond within 30 days.

Children

Pentimento is not directed at children under 13 (or 16 in the EU/UK). We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

Contact

All privacy questions go to hello@pentimento.art.