Skip to main content
WoolenPet
Back to home

Privacy Policy

How WoolenPet collects, uses, shares, protects, and retains account, pet-photo, order, payment, and support information.

Last updated: 2026-09-20

Controller And Contact

AI Cube, LLC d/b/a WoolenPet ("WoolenPet," "we," "us," or "our") is responsible for the personal information described in this policy when it determines why and how that information is processed.

Business mailing address: 2810 N Church St, STE 88565, Wilmington, DE 19802.

Privacy questions and requests may be submitted through a logged-in account at /settings/privacy, through /support, by emailing studio@woolenpet.com, or by writing to the address above, Attn: Privacy.

Scope

This policy applies to the WoolenPet website, accounts, checkout, custom commission workflow, private photo uploads, payments, previews, shipping, customer support, returns, warranty service, and related security operations. It does not govern a third-party service acting under its own privacy policy when the customer intentionally leaves WoolenPet.

Categories Of Information We Collect

Depending on how you use WoolenPet, we collect:

  • Identity, account, and contact data: name, email address, account identifier, authentication records, shipping and billing contact details, and communication preferences.
  • Commission and order data: pet name and characteristics, product and option choices, commission notes, order number, quote and policy versions, production state, preview feedback, Final Approval, shipment, delivery, cancellation, refund, return, RMA, and warranty records.
  • Private reference and evidence media: pet reference photos, optional captions, preview images, and photos submitted for shipping, return, support, or warranty review. A photo may incidentally contain information about a person or location.
  • Payment and transaction data: amount, currency, tax, payment status, refund status, payment-provider reference, and fraud signals. Full card numbers and card security codes are handled by the payment provider and are not stored by WoolenPet.
  • Support and rights-request data: messages, attachments, request type, verification information, response, appeal, and resolution history.
  • Device, network, and usage data: IP address, browser and device type, timestamps, pages or features used, cookie or session identifiers, error diagnostics, and security logs.
  • Consent and preference data: marketing choices, gallery or social-use permission, AI-training choice, cookie choices, Global Privacy Control status where received, and records of consent or withdrawal.

We do not ask for Social Security numbers, government identification, health information, information about children, or other sensitive data to make a normal commission. Please do not include such information in notes or images. If proportionate identity verification is required for a privacy request, we use only what is reasonably necessary.

Sources Of Information

We receive information directly from customers and authorized account users; automatically from the browser, device, and our security systems; and from service providers involved in a requested transaction, such as payment providers, authentication and email providers, and shipping carriers. We may also receive information from an authorized agent acting on a customer's documented instruction.

Why We Use Information

We use personal information to:

  • create, authenticate, and secure accounts;
  • quote, accept, produce, review, revise, approve, ship, and support a custom commission;
  • review reference photos and request needed information;
  • process payments and refunds through the payment provider;
  • communicate order, production, delay, delivery, return, and warranty information;
  • provide customer support and respond to privacy requests;
  • detect and prevent fraud, unauthorized access, abuse, and payment disputes;
  • debug, measure, maintain, and improve site reliability and the customer workflow;
  • maintain accounting, tax, transaction, consent, warranty, and compliance records; and
  • establish, exercise, or defend legal claims and comply with lawful requests.

We do not use personal information for a materially incompatible new purpose without providing any notice or consent that applicable law requires.

Pet Photos, EXIF, And Private Use

Customers keep their rights in pet photos and commission notes. We use them privately only as reasonably necessary to quote, make, review, deliver, support, document, and protect the requested commission, unless the customer makes a separate choice described below.

Our upload process re-encodes supported reference images without input metadata and strips embedded EXIF metadata, including embedded geolocation, before operational storage. Customers should still crop people, children, addresses, telephone numbers, license plates, pet tags, documents, and other unnecessary personal details before upload. No technical process can identify every detail visible in the image itself.

Optional AI Concept Preview

If you choose the AI preview feature, we ask for separate consent before sending metadata-stripped, resized copies of your selected pet photos to the provider named in the form: OpenRouter with Black Forest Labs, or Fal hosting the FLUX.2 model. Do not include people or sensitive information. This optional concept is not required to browse or purchase, is not a production proof, and does not guarantee that the handmade item will match.

WoolenPet processes these preview inputs and outputs in memory, does not add them to a public gallery or an order, and does not persist the image files. The result remains in your current browser panel until you close it or leave; you can download a copy. We retain pseudonymous security counters and single-use request records to enforce limits and prevent duplicate paid requests; these follow our security-record retention rules. Failed or interrupted attempts may still use an allowance. Closing the page may not stop provider processing.

Providers also process the images under their applicable terms and retention policies: OpenRouter privacy, Black Forest Labs privacy, and Fal privacy. Our Fal integration requests no payload storage and inline output; this is not a promise that every provider keeps no technical or safety records. Preview consent is not consent for WoolenPet to publish photos or train AI models. You may decline without affecting other site features.

Gallery, Marketing, Social Media, And AI Training

Purchasing a commission does not authorize WoolenPet to publish private photos or use them to train an AI model. Gallery display, advertising, social-media publication, and AI model training each require a separate, specific, unbundled opt-in. The controls will not be preselected, and consent is not a condition of purchase.

A customer may withdraw optional consent through /settings/privacy or /support. We will stop the optional processing and remove the content from online channels under our control within 30 calendar days, unless a shorter period is required by law. Withdrawal is prospective and may not remove a lawful printed item already distributed or a copy independently reposted by another person, but we will stop future WoolenPet-controlled use and retain only minimal consent or suppression evidence where needed.

When We Disclose Information

We disclose only information reasonably necessary to these recipient categories:

  • payment processors and fraud-prevention providers;
  • cloud hosting, database, private-media storage, authentication, security, and technical operations providers;
  • email, transactional communication, and customer-support providers;
  • shipping carriers and fulfillment providers;
  • site measurement and analytics providers acting for our operational purposes;
  • accountants, insurers, auditors, and legal or other professional advisers subject to appropriate duties;
  • government authorities or other persons when reasonably necessary to comply with law, protect safety or rights, investigate fraud, or establish or defend a claim; and
  • a successor in a merger, financing, reorganization, bankruptcy, or sale of assets, subject to applicable notice and use restrictions.

Service providers may process data only for contracted purposes and under appropriate confidentiality, security, deletion or return, and legal-compliance terms. We do not publish private commission media merely to resolve a support, return, or warranty request.

No Sale And No Current Cross-Site Targeted Advertising

WoolenPet does not sell personal information for money or other valuable consideration. We also do not currently use or disclose personal information for targeted advertising based on activity over time across nonaffiliated websites or apps, and we do not use solely automated profiling to make decisions that produce legal or similarly significant effects.

If these practices materially change, we will update this policy, provide a clear notice before the new processing where required, and provide applicable opt-out or consent controls. We will not treat an optional privacy choice as permission for an unrelated purpose.

Cookies, Do Not Track, And Global Privacy Control

WoolenPet uses cookies or similar storage for authentication, cart and account continuity, preferences, security, reliability, and measurement. Browser controls may block nonessential storage but can affect site features.

Legacy browser "Do Not Track" signals do not have a uniform technical or legal standard, so the site does not separately change its behavior in response to that signal. This disclosure does not limit a legally recognized opt-out preference signal. Where applicable law recognizes Global Privacy Control (GPC) or another valid universal opt-out mechanism, we treat the signal as a request to opt out of sale or cross-site targeted advertising for that browser or device. Because WoolenPet does not currently conduct either activity, receiving the signal does not otherwise change the service.

Privacy Rights And Choices

Subject to identity verification, legal exceptions, and jurisdiction, a customer may request to:

  • confirm whether we process personal information and access it;
  • correct inaccurate information;
  • delete information;
  • obtain a portable copy where technically feasible;
  • receive the categories of third parties to which information was disclosed;
  • opt out of sale, cross-site targeted advertising, or qualifying profiling;
  • withdraw consent for optional processing; and
  • appeal a decision on a rights request.

WoolenPet extends the core access, correction, deletion, and portable-copy request process to U.S. customers even where a particular state law does not require every right. Legal exceptions may allow or require us to retain information for an active order, transaction, tax record, security, fraud prevention, warranty, payment dispute, legal hold, or the establishment, exercise, or defense of a claim.

How To Exercise Rights And Our Response Time

Use /settings/privacy while logged in, or use /support if you cannot access the account. You may also email studio@woolenpet.com or write to our business mailing address, Attn: Privacy. You do not need to create a new account to submit a request.

We use commercially reasonable, proportionate methods to authenticate the request, such as the existing account, order email, or order number. We will not request a full card number or government identification unless it is reasonably necessary and lawful. An authorized agent may submit a request where applicable law permits; we may verify the authorization and, where allowed, confirm the request directly with the customer.

We will respond without undue delay and within 30 calendar days after receipt. If a request is unusually complex and applicable law allows more time, we will notify the requester within the initial 30 days, explain the reason, and state the extended deadline. A shorter legal deadline controls. If we deny a request, we will explain the basis and any available appeal or regulator-complaint method. Requests are free unless applicable law permits a reasonable response to a manifestly unfounded, excessive, or repetitive request.

Retention Schedule

We apply the following standard limits unless a shorter period is requested and legally available, or a longer period is reasonably required for an active transaction, tax rule, fraud or security investigation, warranty, payment dispute, legal hold, or legal claim:

  • Unpaid or expired checkout and upload data: deleted within 30 days after expiration.
  • Original private reference images: deleted within 180 days after the later of confirmed delivery or closure of the applicable return, warranty, and payment dispute.
  • Final approved preview and approval evidence: retained for 2 years after Final Approval or order closure.
  • Order, invoice, payment, refund, tax, and shipping records: retained for 7 years after the transaction or related dispute closes.
  • Support, RMA, warranty, and dispute records: retained for 3 years after closure.
  • Security and access logs: retained for 12 months.
  • Privacy request, verification, appeal, and response logs: retained for 24 months.
  • Backups: encrypted backups use a 30-daily/12-monthly rotation, so a deleted record may remain in an isolated backup for up to 12 months. Deleted data is not restored to active use except for disaster recovery and is deleted again when recovery is complete.

Optional marketing or publication consent is retained until withdrawal, followed by only the minimal record reasonably needed to honor the withdrawal and prevent reuse. We minimize or mask retained data where practical and securely delete or de-identify it when the applicable period ends.

Children

WoolenPet accounts and purchases are for adults who are at least 18. The site is not directed to children under 13, and we do not knowingly collect personal information online from a child under 13. An adult should not upload a child's image or other child information merely because it appears with a pet.

If we learn that we collected a child's personal information in circumstances requiring parental notice or consent, we will stop the affected processing and securely delete the information or obtain legally sufficient parental authorization, as applicable. A parent or legal guardian may contact us through /support.

Security And Incident Response

We use reasonable administrative, technical, and physical safeguards appropriate to the nature and volume of the information, including encrypted transport, access controls, role-based administrative permissions, private-media controls, logging, service-provider review, and secure deletion processes. No system can guarantee absolute security.

If a security incident triggers a legal notice obligation, we will notify affected people and regulators without unreasonable delay and within the periods required by applicable law. We do not ask customers to send passwords, full card numbers, or sensitive evidence through public channels.

Policy Changes

We may update this policy prospectively. The date above is its effective update date. We will make the current policy conspicuously available and provide any notice or consent required for a material change. We will not use a policy change to conceal a materially different practice that occurred before notice.

Contact