Privacy

What we collect

• The photo you take, the cut-out artwork made from it, your design settings, product previews, and print-ready artwork.
• Browser data used to protect and return you to your draft.
• Your name, email, delivery address, optional shipping phone number, order, payment status, and delivery information. We use the phone number only when needed to produce and deliver your order. Our payment provider processes card details. We do not receive your full card number.
• Messages and evidence you send to support.
• Limited device, browser, IP address, security, and error information needed to operate and protect the store.
• Page visits, interactions, browser errors, and masked session recordings to understand where the store fails or is difficult to use. Recordings show page styling and public interface text while hiding form inputs, sensitive text, photos, and product imagery. We exclude the Manage order page and do not create persistent visitor profiles or use advertising trackers. Analytics uses a separate browser-tab identifier, not your draft ownership credentials.

Image checks

We check submitted images against our content rules and remove the background before saving the artwork. These checks can make mistakes. They do not prove ownership or consent, so you remain responsible for having the rights and permission needed to use the image.

Why we use the information

• To create, save, display, share, and print your design.
• To manage carts, payments, production, delivery, cancellations, and remedies.
• To protect the service, enforce the content rules, diagnose failures, and prevent duplicate or unauthorised operations.
• To answer support requests and meet record-keeping and legal obligations.

Who handles it

We share information only as needed with companies that provide payment, hosting, image processing, production, delivery, email, support, and usage analytics services. We may also disclose information when required by law or when needed to protect our rights or someone else's safety.

These companies may process information in Australia and overseas, including in the United States and other countries where they operate.

Product links and draft access

A finished product page is public to anyone who has its link. A person with the link can view, share, and buy that product. Do not create a product if that public-by-link access is unsuitable for the portrait.

An unfinished draft is linked to the browser that created it. Clearing browser data, changing browsers, or changing devices may remove your ability to return to it.

Retention and deletion

• An unfinished draft with no finished product becomes eligible for deletion 30 days after its last successful change.
• We process a paid-order webhook in memory and keep only its event identifier, integrity hash, status, and delivery metadata for up to 30 days. We do not retain the webhook body.
• Our working copy of the delivery address and contact details is deleted 45 days after an order reaches a completed, cancelled, or refunded state. The commerce, payment, production, or delivery services may retain their own order records for longer.
• Protected-order access records contain a one-way order reference rather than the address or email and are kept for up to two years.
• If you unpublish a product that has never been ordered, its images become eligible for deletion after 30 days.
• For an unpublished product that has been ordered, source photos and previews become eligible for deletion at least 45 days after the latest delivery, once the order is complete and no issue remains open.
• Print-ready files for an unpublished, ordered product become eligible for deletion two years after the latest delivery or resolution of the latest product issue, whichever is later.
• We may keep order, financial, security, and legal records after image deletion. Active products remain stored while they are available to view or buy.

Access, correction, complaints, and deletion requests

Email support@bent.build to ask what personal information we hold about you, request a correction or deletion, or make a privacy complaint. Include enough information to locate the relevant draft or order, but do not email payment-card details or a copy of identity documents unless we ask for a specific secure verification step.

We may need to keep information connected with an order, dispute, security check, legal obligation, or unresolved product issue. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.