What we collect
We keep the data we collect deliberately small. It is:
- Your email — used only to send your magic sign-in link and deliver your private portrait draft. Email is sent through Resend.
- The pet photo you upload — used solely to generate your portrait, then deleted on the schedule below.
- Anonymous usage analytics — measured with PostHog with autocapture off and session recording off. We fire only the specific product events we need to understand the flow. Beyond standard UTM / click attribution for our ads, we run no advertising trackers.
How long we keep it — and when we delete it
Two clocks run on the media in your project, and both end in permanent deletion:
- Your source photo is deleted within 24 hours. In practice it is deleted immediately after the character-sheet stage of generation succeeds — the 24-hour window is the outer bound, not the target. The portrait is built from an internal derived reference, not from your original photo, once that stage completes.
- Your derived preview and draft are kept for 30 days, then hard-deleted. After 30 days the portrait draft and every derived file are permanently removed from our storage.
- You can delete everything immediately. An immediate-delete control on your draft page removes your source photo, the derived preview, and all job data on demand — you do not have to wait for either clock.
We never use your photos or email to train AI
This is a firm commitment, not a setting you have to find: the photos you upload and the email you provide are never used to train any AI model — not ours, and not any third party’s. Your photo is used only to make your portrait, and then it is deleted on the schedule above.
Human faces are never processed
Nuzzoo is for pets. Before any generation runs, every upload passes through preflight. If a photo contains a human face, it is rejected or the human face is cropped out before anything else happens. We perform no human biometric processing of any kind, ever. No face recognition, no face templates, no human-face data retained.
Who processes your data
We use a small set of trusted service providers to run Nuzzoo. Each one only ever handles the data it needs to do its job:
- Supabase
- Storage and authentication — holds your project record and your private media in access-controlled storage.
- Resend
- Email — sends your magic sign-in link and delivers your private portrait draft.
- fal.ai
- Portrait generation — media transits fal with minimum retention configured and is immediately copied into our own private storage; you never receive a fal URL.
- PostHog
- Analytics — anonymous product events only, with autocapture and session recording disabled.
- Vercel
- Hosting — serves the Nuzzoo website and application.
Your choices
You can delete your source photo, preview, and job data at any time from your draft page using the immediate-delete control. If you would like anything else removed, or have a question about your data, reach us through the contact page.
Changes to this policy
If we change how we handle your data we will update this page and revise the “last updated” date above. Because the retention windows here are commitments shown to you at the moment you save a draft, we will not quietly shorten your rights after the fact.