Legal
Privacy.
You are handing us a photograph of someone you care about. Here is exactly what happens to it.
What we take
The photograph you upload, and — only if you buy — the mobile number and optional email address needed to raise a payment order and send you a receipt. We do not ask you to make an account, and we do not have one to give you.
What we strip immediately
Photos from phones carry EXIF metadata, which routinely includes the GPS coordinates of where the picture was taken. We remove all of it on arrival, before the image is stored or sent anywhere. What our image provider sees is pixels and nothing else.
Who else sees the photo
The image is sent to the third-party model provider that does the painting. Which one depends on our configuration; it is one of fal.ai, Replicate, or Google (Gemini). They process the image to produce the artwork and are contractually bound not to use it to train models. We do not send your photo anywhere else, and we never sell it.
How long we keep it
Your source photo, the preview, and the finished artwork are all deleted within 24 hours. After that they are gone from our side and cannot be recovered — which is why we tell you to save your download.
Payments
Payments are handled by Cashfree. Your card or UPI details are entered on Cashfree’s checkout and never touch our servers. We store the order reference and whether it was paid — nothing more.
Your rights
Reach us via the contact page and we will delete anything of yours we still hold, or tell you what we hold, within seven days. Because we retain almost nothing for almost no time, the answer is usually “nothing, already”.
Cookies
None for tracking. The site keeps your chosen house style in local storage and your painting’s access token in session storage, both on your own device. There is no advertising pixel on this site.
Gold & Ink Studio. Questions about this policy go to the contact page.
Note for the operator: before you take real money, have a lawyer review this page against the DPDP Act 2023 and add your registered business address. The commitments above are only true while the code that implements them is the code you deploy.