Privacy Policy

Who handles your information

Shelfcanvas operates this service. For privacy requests and account closure, email contact@shelfcanvas.com.

Information and purposes

We process account names, email addresses and sign-in details to run accounts; uploaded photos and designs, prompts, settings and generated images to provide image services; purchase and subscription records to manage billing; and support messages and attachments to respond to requests. Stripe Managed Payments handles checkout and payment details. We do not store full card numbers.

Security and abuse-prevention records help protect accounts and apply the once-per-network signup promotion. Signup gift tracking stores an IP hash rather than a raw signup IP address. Hosting and security providers may process request IP addresses separately.

When you send a result for review, we save the owned source and result references, your message, issue choices and timestamped review consent in a support ticket. Consent to use the submitted images for improvement is a separate choice.

Analytics

Our analytics vendor is Plausible. We send allowlisted page categories and product events such as signups and downloads. Vendor event properties exclude account and job identifiers, photo URLs, filenames, customer notes, prompts, and query strings or URL fragments. Our own database stores operation-linked events for reliable signup, feedback, generation, credit and billing records; this is separate from the vendor data.

Our tracker respects the browser's Do Not Track setting. See the Cookie Policy for site storage.

Service providers

Cloudflare provides hosting, R2 image storage and security, including Turnstile verification where enabled. Stripe Managed Payments provides payment processing. Image tasks send the uploads, prompts and settings needed for processing to fal.ai and the model provider used for the task. Content checks may send images or text to seeapi or Sightengine, depending on the configured moderation service.

Account and service emails are sent through our configured email delivery service. The service supports Cloudflare Email and Resend; the provider used depends on configuration. Providers process the information needed to perform their services under their own terms and privacy policies. We do not sell your personal information. We do not make a blanket promise about every provider's data retention or model-training practices.

Retention and deletion

• Saved generated results in My creations have a 30-day availability period. The service records an expiry for each result and schedules expired files for cleanup. Download images you want to keep.
• Temporary moderation images are stored separately in private R2 quarantine storage and normally deleted when the check finishes. The quarantine cleanup policy uses a 1-day lifecycle for residual objects; it does not apply to saved results.
• Private quality-check candidates and review evidence have a 180-day retention period from creation. This is separate from the time allowed to accept or discard a candidate and from saved-result availability.
• Uploaded source files are kept as needed for the associated task, result or requested review. Source files covered by result cleanup are deleted with the associated expired result.
• Account, support, consent, security, billing and operation-linked analytics records are retained as needed to operate the service, handle requests and disputes, prevent abuse and meet applicable legal duties. We do not specify a single retention period for these different records.

Cleanup is scheduled and may retry after a storage failure. Provider copies and backups follow their own retention and deletion processes; expiry in My creations does not mean every related record or provider copy is deleted at the same moment.

Your choices and requests

Email contact@shelfcanvas.com to request access, correction, a copy or deletion of your personal information, or account closure. Include the email associated with your account and describe the request. We may need to verify your identity. Do not send your password or full card details.

We will review the request and explain any information needed or limits on deletion. Some records may need to remain for legal duties, security or an active dispute. Account closure does not promise immediate deletion of all provider copies or backups, and account settings do not provide complete self-service deletion or export.

Security and changes

We use access controls and secure connections. No online service can promise complete security. We update this policy when the service changes; the latest revision date appears at the top of this page.