Privacy Policy

PuppetMe AI (“PuppetMe,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect when you use our website and services, how we use it, who we share it with, and the choices you have.

By using PuppetMe, you agree to the practices described here. Please also read our Terms of Service.

Account information. When you create an account or complete a purchase, we may collect your name, email address, phone number, and a hashed password. If you check out as a guest, we may store a contact email you provide at payment so we can deliver your order and send service notifications.

Photos and generated images. When you use the Service, you upload source photos and we store generated previews, unlocked images, and group compositions linked to your account or session.

Payment information. Payments are processed by Stripe. We receive transaction metadata such as payment status, amount, and currency — not your full card number, which Stripe handles directly.

Usage and technical data. We automatically collect information such as your IP address, browser type, device information, pages visited, and timestamps. We use session cookies to keep you signed in and to associate guest activity with your browser session.

Communications. If you email us or contact support, we retain the content of those messages.

We use personal information to:

• Provide, operate, and improve the Service
• Generate AI character portraits and group images from your uploads
• Process payments, apply credits, and unlock downloads
• Send transactional emails such as purchase confirmations and “your puppet is ready” notifications
• Authenticate your account and prevent fraud or abuse
• Respond to support requests and enforce our Terms
• Comply with legal obligations

We do not sell your personal information. We may send product updates or marketing emails only where permitted by law and with your consent where required. You can opt out of marketing messages at any time.

We share information only as needed to run the Service:

• Stripe — payment processing and fraud prevention
• Resend — delivery of transactional email
• Vercel Blob (or similar cloud storage) — storing uploaded and generated images
• Google Gemini / Google Generative AI — AI image generation from your uploads. Photos submitted for generation are processed by these providers under their terms and privacy policies.
• Hosting and infrastructure providers — operating our website and database

We may also disclose information if required by law, to protect our rights or users, or in connection with a merger, acquisition, or sale of assets — subject to appropriate safeguards.

We use essential cookies and similar technologies to maintain your session, remember your preferences, and secure the Service. These are necessary for core functionality and are not used for third-party advertising on our site.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in or completing purchases.

We retain account information and generated content for as long as your account is active or as needed to provide the Service. Transaction records may be kept longer for accounting, tax, and legal compliance.

You may request deletion of your account and associated personal data by contacting hello@puppetme.co.uk. We may retain certain information where we have a legal obligation or legitimate interest, such as completed payment records or data needed to resolve disputes.

Depending on where you live, you may have rights to access, correct, delete, restrict, or export your personal data, and to object to certain processing. UK and EEA users may also lodge a complaint with their local data protection authority.

To exercise your rights, email hello@puppetme.co.uk. We may need to verify your identity before responding.

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data without appropriate consent, contact us and we will take steps to delete it.

We and our service providers may process data in the United Kingdom and other countries. Where data is transferred outside your home jurisdiction, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms where required by law.

We use reasonable technical and organisational measures to protect personal information, including encrypted connections, access controls, and secure password hashing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the latest version. Material changes may be communicated by email or a notice on the site where appropriate.

For privacy questions or requests, contact us at hello@puppetme.co.uk.