Privacy Policy

K9 Canvas lets you put a photo of your dog on a shared public canvas. This page explains what we collect, why we collect it, who else sees it, and how to get it removed. We have tried to write it in plain language rather than legal boilerplate.

Short version: we collect your email, your dog’s photo and name, and payment details handled by Stripe. Your dog’s photo and name are public by design. Your email address is never shown publicly. We do not sell your personal information, and we do not run advertising or analytics trackers.

1. Who we are

K9 Canvas operates the website at k9canvas.app. You can reach a human at support@k9canvas.app. We are based in the United States, and the services we use to run K9 Canvas store data in the United States.

2. What we collect

• Your email address. Collected by Stripe when you pay, and again if you sign in to download your certificate. We use it to send your upload link, your certificate, and support replies.
• Your dog’s photo. Uploaded by you. We store the original and generate a thumbnail, a share image, and a printable certificate from it.
• Your dog’s name, whether the placement is a memorial, and the canvas coordinates assigned to it.
• Payment information. Handled entirely by Stripe. We never receive or store your card number. We keep a record of the payment (amount, Stripe payment reference, your email) for accounting.
• Marketing consent, only if you tick the optional box, along with the time you ticked it. It is unchecked by default.
• How you found us. If you arrive through a link with campaign tags, or from another website, we store those tags and the referring address alongside the placement.
• Your IP address, used only to rate-limit abuse. It is held briefly in server memory and is never written to our database. Our hosting provider keeps its own short-lived request logs, which we do not control.

We do not ask for your name, your address, your phone number, or your date of birth, and we have no way to collect them.

3. What is public

Once your dog is placed on the canvas, the following is visible to anyone on the internet:

• your dog’s photo and name;
• its coordinates on the canvas and its own page address;
• its memorial or Founding Dog status, if either applies;
• its placement number and how many times it has been booped.

Your email address is never displayed publicly, never included in share images, and never exposed through our public interfaces. Please keep in mind that a photo can reveal more than the dog in it — faces, houses, street signs, or the location where it was taken. Only upload a photo you are comfortable showing publicly and permanently.

4. Automated photo review

Every uploaded photo is checked before it appears on the canvas. To do this, we send the photo to OpenAI through a temporary private link so their vision model can confirm it shows a dog and does not contain inappropriate content. Your dog’s name is also sent to OpenAI’s content moderation service. Photos the automated check is unsure about are held for a human to review.

OpenAI processes this content in order to return a moderation result. We do not use your photo to train any model, and we do not permit our providers to do so.

5. Who else receives your data

We use a small number of service providers to run K9 Canvas. Each one only receives what it needs:

• Stripe — processes payments and collects your email at checkout.
• Supabase — hosts our database, photo storage, and sign-in system.
• Vercel — hosts the website and delivers images.
• Resend — delivers your confirmation and certificate emails.
• OpenAI — performs the automated photo and name review described above.
• ImprovMX — forwards email sent to our support address.

We do not sell your personal information, and we do not share it for advertising. We may disclose information if the law requires it, or to protect the safety and rights of people using K9 Canvas. If K9 Canvas is ever sold or transferred, the canvas and the data behind it would transfer with it, and this policy would continue to apply until you are told otherwise.

6. Cookies and tracking

We do not use advertising cookies, analytics cookies, or any third-party tracking scripts. There is no Google Analytics, no advertising pixel, and no session-recording tool on this site.

The only cookies we set are the sign-in cookies needed to keep you logged in after you use a magic link. If you never sign in, browsing the canvas sets no cookies at all.

One exception worth naming plainly: the certificate email we send contains a small invisible image that tells us the email was opened. We use it to confirm our emails are actually arriving. If you would rather it did not, blocking images in your email client prevents it.

7. Emails we send

• Purchase confirmation, with your upload link.
• Your certificate, once your dog is on the canvas.
• Support replies, when you write to us.

These are service emails and are sent whether or not you opt in to updates. We do not currently send marketing email at all. If we start, we will only send it to people who ticked the optional consent box, and every message will have an unsubscribe link.

8. How long we keep things

A spot on the canvas is intended to be permanent, so we keep your dog’s photo, name, and placement for as long as K9 Canvas operates, unless you ask us to remove it.

We keep payment records for as long as tax and accounting rules require, typically seven years. We keep a limited internal history of events such as purchases, placements, and moderation decisions so that we can support you and investigate problems. To be straightforward with you: we do not currently run an automatic deletion schedule for those internal records.

9. Your rights and how to use them

Depending on where you live — including under the GDPR in the UK and Europe, and the CCPA and CPRA in California — you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. We make these rights available to everyone who uses K9 Canvas, wherever you live.

To use any of them, email support@k9canvas.app from the address you used to buy your spot. This is handled by a person, not a self-service button. We aim to reply within 30 days. We will not charge you or treat you differently for asking.

What deletion means here. If you ask us to remove your dog, we take down its public page and delete the photo and the images generated from it. Two honest limits: we must keep basic payment records to satisfy tax law, and copies that other people already downloaded or shared, or that search engines cached, are outside our control. Removing a dog also releases its spot, and that spot may later be sold to someone else.

10. Security

Payments run through Stripe and never touch our servers. Photos awaiting review and certificate files are stored privately and are reachable only through short-lived links. Signing in uses an emailed magic link, so there is no password to steal. No system is perfectly secure and we cannot guarantee absolute security, but if a breach affects your personal information we will tell you promptly.

11. Children

K9 Canvas is not intended for children. You must be at least 18 years old to buy a spot. We do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, email support@k9canvas.app and we will delete it.

12. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change materially affects how we handle your information, we will email people who have placed a dog with us.

13. Contact

Questions, corrections, or requests: support@k9canvas.app.