Privacy Policy

Last Updated: April 2026

LegacyInBrush (“we,” “our,” or “us”) takes your privacy seriously. This Privacy Policy describes the types of information we collect from you, how we use and protect that information, and the choices you have regarding your personal data when you use our website and services.

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

  • Account Details: Your name, email address, and password when you register
  • Profile Information: Display name or avatar you choose to set
  • Payment Details: Billing information processed securely by Stripe — we do not store full card numbers
  • Delivery Address: Shipping address provided for physical canvas print orders
  • Support Messages: Any communications you send to our customer support team

1.2 Content and Files You Upload

  • Photographs and reference images submitted to create your portrait
  • Completed portrait files and style variations generated for your order
  • Style preferences and customization choices you make during the order process

By uploading a photograph, you confirm that you have the right to use and share that image for this purpose. If the photograph includes other individuals, you are responsible for ensuring that you have their permission — or that of their legal guardian — to submit the image for portrait creation.

1.3 Information Collected Automatically

  • Usage Information: Pages you visit, features you use, and order history
  • Device and Browser Data: Browser type, operating system, and IP address
  • Interaction Data: Session length and feature engagement patterns
  • Cookies and Similar Tools: Described further in Section 7

2. HOW WE USE YOUR INFORMATION

We use the information we collect to:

  • Operate, maintain, and deliver the LegacyInBrush service
  • Process and fulfill portrait orders — both digital and physical
  • Manage your account and verify your identity
  • Handle payments and issue receipts or refunds
  • Send you order confirmations, delivery updates, and account notifications
  • Respond to your support requests and inquiries
  • Identify and prevent fraud, abuse, or service misuse
  • Maintain and improve the reliability of our platform
  • Send promotional communications where you have given consent or where permitted by law
  • Meet our legal and regulatory obligations

3. HOW WE SHARE YOUR INFORMATION

3.1 Trusted Service Providers

We share your data only with third parties that help us deliver our service, including:

  • Stripe: Secure payment processing for all transactions
  • Printful: Production and fulfillment of physical canvas print orders
  • WooCommerce / WordPress: Our e-commerce platform through which order and account data is managed
  • Email Service Providers: Delivery of transactional and marketing emails
  • Cloud Hosting Providers: Secure infrastructure for our website and file storage
  • Analytics Services: Understanding how our platform is used and how to improve it

All third-party providers are bound by confidentiality obligations and are required to process your data only as directed by us.

3.2 Legal Obligations

We may disclose personal information when required by applicable law, regulation, court order, or lawful request from a governmental authority.

3.3 Business Transitions

If LegacyInBrush is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

3.4 At Your Request

We may share information with other parties when you explicitly direct or authorize us to do so.

We do not sell, rent, or trade personal information to any third party.

4. DATA RETENTION

4.1 Account Information

Kept for as long as your account remains active and for a reasonable period afterward to satisfy legal, accounting, or dispute-resolution requirements.

4.2 Completed Portrait Files

Stored in your account until you choose to delete them or close your account.

4.3 Watermarked Preview Files

When you place an order, we generate a watermarked preview for your approval before the final file is released. This preview is used solely to allow you to review your portrait before completing your purchase.

For orders that are completed (purchased), the watermarked preview is retained for a minimum of 18 months from the date of purchase. This retention exists solely to support dispute resolution in the event of a payment chargeback, and for no other purpose.

In the event of a payment dispute, we may share the watermarked preview — along with access logs (IP address and timestamps of preview access and order placement) — with Stripe, Inc. and, where required by the dispute process, with the customer’s card-issuing bank. This sharing is conducted solely through Stripe’s secure dispute resolution portal and is not used for any other purpose.

We do not share your original uploaded photo(s) as part of any dispute process. Only the watermarked artwork preview is used as evidence.

For orders that are cancelled without purchase, the preview is deleted automatically and is not retained.

4.4 Photos You Upload

Your uploaded photos are used solely to generate the portrait you ordered. They are not reviewed by human staff for any other purpose, and are not used to train, fine-tune, or improve any AI model. Our human artists review only the generated portrait output — not your original photo — as part of quality control. Photos are stored securely and removed automatically once they are no longer needed to complete your order.

4.5 Transaction and Financial Records

Kept for the period required by applicable accounting, tax, and financial regulations — typically up to seven years.

5. YOUR RIGHTS AND CHOICES

Depending on where you are located, you may be entitled to:

  • Access: Obtain a copy of the personal data we hold about you
  • Correction: Request that we correct inaccurate or incomplete information
  • Deletion: Ask us to delete your account and the personal data associated with it
  • Portability: Receive your data in a structured, machine-readable format
  • Restriction or Objection: Limit or object to certain ways we process your data
  • Marketing Opt-Out: Unsubscribe from promotional emails at any time using the link in any email we send

To exercise any of these rights, please contact us at: support@legacyinbrush.com

6. DATA SECURITY

We take reasonable steps to protect your personal information, including:

  • Encrypted connections (HTTPS/TLS) for all data in transit
  • Encrypted storage for sensitive account and payment data
  • Secure login systems and hashed passwords
  • Restricted internal access controls and activity monitoring
  • Routine security updates and vulnerability reviews

While we work hard to protect your information, no system is entirely immune to risk. We cannot guarantee absolute security of data transmitted over the internet.

7. COOKIES AND TRACKING TECHNOLOGIES

7.1 Necessary Cookies

These are required for the site to function — including keeping you logged in and maintaining your session.

7.2 Analytics Cookies

Help us understand how visitors interact with our site so we can improve the experience.

7.3 Preference Cookies

Remember your settings and choices to personalize your experience.

You can adjust your cookie preferences through your browser settings. Note that blocking certain cookies may affect how parts of the site function.

8. CHILDREN’S PRIVACY

Our services are intended for adults and are not directed at children under the age of 13. We do not knowingly collect personal information from children. If we learn that data from a child has been collected without appropriate parental consent, we will delete it as quickly as possible.

9. INTERNATIONAL DATA TRANSFERS

LegacyInBrush operates from the United States. If you access our service from outside the US, your information may be transferred to and processed in the United States or other countries. We use appropriate safeguards — such as contractual clauses — to protect data transferred internationally.

10. HOW YOUR PHOTOS ARE USED

10.1 Purpose of Use

The photographs you upload are used solely to create the portrait you commissioned. We use advanced rendering technology combined with human artist review to produce your final portrait. Your photos are not shared, sold, or used for any other purpose.

10.2 Not Used for Model Training

Your uploaded photos are never used to train, test, or improve any machine learning or AI model — ours or any third party’s. Your images exist only to serve your order and are deleted automatically once they are no longer needed.

10.3 Aggregated Technical Data

We may analyze anonymized, aggregated technical metrics — such as processing times or error rates — to improve system performance. This data cannot be linked to any individual user or their content.

11. LINKS TO OTHER WEBSITES

Our site may include links to third-party websites. Once you leave our site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of external sites and encourage you to review their policies.

12. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including:

  • The right to know what personal information we collect and how it is used
  • The right to request deletion of your personal information
  • The right to opt out of the sale of personal information — we do not sell personal data
  • The right not to be discriminated against for exercising these rights

13. EUROPEAN PRIVACY RIGHTS (GDPR)

If you are located in the EU or EEA, you have rights under the General Data Protection Regulation, including the right to access, correct, erase, or restrict your data, receive a portable copy, and lodge a complaint with a supervisory authority.

14. UNITED KINGDOM PRIVACY RIGHTS (UK GDPR)

If you are located in the United Kingdom, your personal data is protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You have the same core rights as EU residents under GDPR, including the right to access, correct, and erase your personal data, and to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Legal Grounds for Processing

  • Contract performance: Delivering the service you purchased
  • Legitimate interests: Fraud prevention, security, and service improvement
  • Consent: Marketing and optional communications
  • Legal compliance: Meeting our obligations under applicable law

14. UPDATES TO THIS POLICY

We may revise this Privacy Policy from time to time. When we make significant changes, we will notify you by email (where applicable) and by posting a notice on our website. The updated “Last Updated” date at the top will always reflect the most recent revision. Continued use of our service after changes take effect means you accept the updated policy.

15. DO NOT TRACK SIGNALS

Some browsers send “Do Not Track” signals to websites. Because there is currently no agreed industry standard for how sites should respond, we do not act on these signals at this time.

16. DATA BREACH RESPONSE

In the event of a security breach involving your personal information, we will notify affected users and the relevant authorities within the timeframes required by applicable law.

17. CONTACT US

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please reach out to us:

By using LegacyInBrush, you confirm that you have read and understood this Privacy Policy.