Privacy Notice

Who is responsible for my data?

PaintedApp, LLC runs Painted Letters and is the controller of the personal data described here. Our mailing address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it is useful to you or the law requires, and never sell it.

What happens to my photograph?

It stays on your device. The studio opens it in this browser tab, turns it to grey, straightens it and lifts the paper away there, on your phone or computer. The photograph is never uploaded, never stored by us and never seen by us. Close the tab and it is gone.

When you press Order This Print, the studio sends one thing made from it: the ink mask, a black-and-white picture of the strokes and nothing else, one bit per pixel, under 800 KB. A mask shows the handwriting, so it can carry what the note says. It goes to our file store on Vercel Blob at an address no one can guess, and the print file and a small preview are drawn from it there. The mask is sent before you pay, so it exists even if you do not go on to pay.

So that the Back link from checkout can bring your ink back, the studio keeps a copy of the mask in this tab's session storage. Closing the tab clears it.

What happens to words I type?

A typed note is written out on your device. When you choose A Script, the studio sets your words in that script in this browser tab and turns them into the same kind of ink mask a photograph becomes. Only the mask is sent, when you order, as above. The line beneath travels as text with your order, because the print sets it.

Choosing a script for another language sends your words to be translated. Japanese Brush, Chinese Brush, Korean Brush, Arabic Naskh, Nastaliq, Hebrew, Devanagari and Russian Script write in their own languages, so choosing one, or pressing Write It in that language, sends your typed note and your line beneath through our server to Anthropic, whose Claude model translates them. We keep none of it. Anthropic handles the words under its commercial terms, which do not let it train its models on them; it may hold a request for a limited time to check for misuse. Choose a script for Latin letters and nothing is sent.

Screenshots of a conversation are sent to be read. When you choose A Conversation and bring screenshots of texts or an email, your browser makes each smaller and sends it through our server to Anthropic, whose Claude model reads out the words, who wrote each and in what order. Only those words come back to your browser. We keep none of the pictures and none of the words, and we write nothing they hold to our logs. Anthropic handles them under the same commercial terms as a translation. A screenshot can show other people's names and words: bring only a conversation you are free to share. If a conversation is translated, its messages and names are sent the same way as a typed note.

Do you use cookies or analytics?

No. This site sets no cookies and runs no analytics, advertising pixels or third-party trackers. If that ever changes, this page changes first, and we will ask before loading anything. Stripe's checkout page is Stripe's own: it may set its own cookies to prevent fraud, under Stripe's privacy policy.

What do you collect when I order?

• Your name and shipping address, to print and deliver the order. A Digital File or a gift code needs no address, so none is asked for.
• Your email address, to send the receipt and to reach you about the order.
• The ink mask and your choices: the ink, the ground, the sheet, the size and the line you set beneath the hand, to draw and print it.
• For a gift: the names and the message you write for the note. They go to Stripe with the payment and into the email that carries the code to you, and nowhere else.
• Payment details: we never receive them. Stripe collects and holds your card details directly; we see the outcome and nothing more.

We use these to carry out the order you placed, and we keep the record because tax and accounting law require it. There are no accounts.

Who else sees it?

• Stripe: payment processing. It collects your card and billing details directly and holds the record of the order.
• Prodigi or Printful: printing and shipping, by whichever of the two makes the print. That lab receives your name, shipping address, email address, the order details and the print file, which shows the handwriting. Asking both labs for a shipping price sends only the size and the country, nothing about you.
• Resend: sending the receipt, the file or gift code and the tracking link. It receives your email address and the message.
• Anthropic: reading screenshots you bring as a conversation, and translation when you choose a script for another language. It receives those pictures or words and nothing about you.
• Vercel: hosting the site, running the checkout and storing the mask, the print file and its preview. Like any web host, it sees your IP address when your browser asks for a page.

Nothing deletes the mask or the print file on a clock today; ask us and we will remove yours. Some of these companies operate outside your country, including in the United States. We do not share your data with anyone for their own marketing.

Will you email me after I order?

About that order, and nothing else. Every order gets the emails it needs: the receipt, the file or the gift code, and for a print, the tracking link when the lab ships it. We send no later note of any kind, so checkout does not ask whether you would like to hear from us.

Where is my order kept, and for how long?

In Stripe. We keep no database of our own. The record of the order, meaning what you bought, your email and the address it went to, lives in Stripe, and the lab that made the print keeps its own record of the job. We keep it for support, for our promise on damaged or wrong prints, and for tax and accounting. Ask us to delete it and we will, unless the law requires us to keep it.

What are my rights?

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, and we will act within 30 days. Because there are no accounts, requests come by email: write from the address you ordered with. If you are in the EEA or the UK you also have the right to object to processing, to ask for portability, and to complain to your local data protection authority.

If you are in California or another US state with a privacy law, you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, for money or for advertising. We honour Global Privacy Control signals all the same, and we will never charge you differently for exercising any of these rights.

Children

This shop is for adults. We do not knowingly collect data from anyone under 16. If a child has given us something, write to us and we will remove it.

Changes

If this notice changes, the date at the top changes with it. The terms of service and the shipping and returns page cover the rest of an order.