← Back to Home

Privacy Policy

Last updated: May 2026

This Privacy Policy describes how Riley Ventures LLC (DBA Acme Studio), operating CatArt.ai("we," "us," "our"), collects, uses, and discloses your information when you use our Service. By using CatArt.ai, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Definitions

  • Company refers to Riley Ventures LLC (DBA Acme Studio), 1615 South Congress Avenue, Suite 103, Delray Beach, FL 33445.
  • Service refers to the CatArt.ai website at catart.ai and all related services.
  • Personal Data means any information that relates to an identified or identifiable individual.
  • Usage Data means data collected automatically from your use of the Service.
  • Cookies are small files placed on your device by a website, used to store browsing information.
  • You means the individual accessing or using the Service.

2. Information We Collect

2.1 Personal Data

When using our Service, we may ask you to provide personally identifiable information including:

  • Email address — for order delivery, account creation, and communications
  • Name — for account identification and physical order shipping
  • Shipping address — for delivery of Physical Goods (canvas prints, framed prints) to US addresses
  • Phone number (optional) — for delivery updates on physical orders
  • Pet name and photos — Cat images you upload for portrait generation

2.2 Payment Information

We do not store or collect your payment card details. Payment information is provided directly to our payment processor, Stripe, whose use of your personal information is governed by their Privacy Policy. Stripe adheres to PCI-DSS standards for secure handling of payment information.

2.3 Usage Data

Usage Data is collected automatically and may include:

  • Your device's IP address, browser type, and version
  • Pages visited, time and date of visit, time spent on pages
  • Unique device identifiers and diagnostic data
  • Referring URLs and search terms
  • Mobile device type, OS, and unique device ID (if applicable)

3. Tracking Technologies & Cookies

We use Cookies and similar tracking technologies to track activity on our Service and store certain information. Technologies used include cookies, beacons, tags, and scripts.

3.1 Types of Cookies We Use

  • Essential Cookies (Session) — required for the Service to function, including authentication and cart functionality.
  • Functionality Cookies (Persistent) — remember your preferences, style choices, and login details.
  • Analytics & Performance Cookies (Persistent, Third-Party) — track traffic and usage patterns to help us improve the Service.
  • Advertising & Targeting Cookies (Persistent, Third-Party) — track browsing habits to serve relevant advertisements on third-party platforms.

3.2 Third-Party Tracking

We use the following third-party tracking technologies:

  • Google Analytics — web analytics for traffic and usage insights. Privacy Policy
  • Meta Pixel (Facebook) — conversion tracking and remarketing. Privacy Policy
  • Bullseye — analytics and attribution tracking.

You can instruct your browser to refuse all Cookies or indicate when a Cookie is being sent. However, some parts of the Service may not function properly without Cookies.

4. How We Use Your Information

We use your Personal Data for the following purposes:

  • To provide the Service — generate AI portraits, process orders, and deliver digital and physical products.
  • To process payments — facilitate transactions through Stripe.
  • To fulfill physical orders — share your shipping address and print-ready images with our production partner, Lumaprints, for printing and shipping.
  • To communicate with you — send order confirmations, delivery notifications, shipping updates, and respond to support requests.
  • To send marketing — promotional emails about new features, styles, or offers (you can unsubscribe anytime).
  • To improve the Service — analyze usage patterns, identify issues, and enhance user experience.
  • To deliver targeted advertising — show relevant ads on third-party platforms (Meta, Google) based on your interactions.
  • To enable sponsorship and partner marketing — share limited data (described in Section 5.1) with vetted commercial sponsors so they can deliver relevant offers and measure performance. You can opt out at any time.
  • To prevent fraud — detect and prevent fraudulent transactions and abuse.

5. Sharing Your Information

5.1 Marketing & Sponsorship Partners

We operate a sponsorship program that allows vetted commercial brands (for example, premium cat food, supplies, health, or insurance brands) to reach our audience through our Service. As part of these partnerships, we may share the following limited information with sponsors:

  • Email address — only where you have consented to receive partner offers (e.g., by opting in at email capture or to a co-branded email).
  • Pet name, pet breed (where provided), and approximate geographic region — for personalization of partner offers and direct mail.
  • Engagement signals — non-payment information such as the surface where you saw a sponsor (e.g., generation page, post-purchase email), whether you clicked a sponsor link, and whether you opted in to a partner offer.
  • Hashed identifiers shared with advertising platforms — for example, hashed email shared with the Meta Pixel or sponsor-side audience tools (such as Bullseye) to enable retargeting and lookalike audience creation. We do not share clear-text email for this purpose.

We do not share your payment card information, your shipping address, your uploaded cat photos, or your generated portraits with sponsors.

All sponsors are required, by written agreement, to (1) use your information only for the specific sponsorship campaign, (2) not resell your information, (3) honor your opt-out and deletion requests, and (4) delete the information within 30 days of the end of the campaign.

You can opt out of all sponsor data sharing at any time by emailing meow@catart.ai with the subject line "Opt out of sponsor sharing," or by clicking the unsubscribe link in any marketing email. Opting out does not affect our ability to send you transactional emails (order confirmations, shipping updates, etc.).

5.2 Service Providers

We share your Personal Data with the following service providers as necessary to operate the Service:

  • Stripe — payment processing. Privacy Policy
  • Lumaprints — production and fulfillment of physical orders (canvas and framed prints). We share your shipping address and print-ready artwork. Applies only to physical product orders.
  • Replicate — AI image generation processing. Privacy Policy
  • Supabase — secure database and file storage. Privacy Policy
  • Vercel — website hosting and deployment. Privacy Policy
  • Resend — transactional and marketing email delivery. Privacy Policy
  • Google & Meta — analytics and advertising as described in Section 3.2.
  • Bullseye — visitor analytics and identification as described in Section 3.2. Sponsor partners participating in our identified-audience program may receive matched audience data through this service.

We do not sell your personal information for monetary consideration. Our sponsorship data sharing (Section 5.1) and our use of third-party advertising and analytics tools may constitute a "share" or "sale" under the California Consumer Privacy Act (CCPA) and related state laws. See Section 11 for opt-out rights.

We may also share aggregated, anonymized data that cannot identify you for analytics and business purposes.

6. Photo Storage & Deletion

Photos you upload are stored securely in encrypted cloud storage and used solely for generating your portraits and fulfilling your order (including sending to our print partner for physical orders). Photos are automatically deleted from our active servers within 30 days of order completion. Generated portraits are retained in your account for your convenience but may be deleted upon request.

You may request immediate deletion of your uploaded photos and generated portraits at any time by contacting meow@catart.ai.

7. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy. Specifically:

  • Account data — retained as long as your account is active, plus 12 months after deletion request.
  • Order records — retained for 7 years for tax and legal compliance.
  • Uploaded photos — deleted within 30 days of order completion.
  • Usage data — retained for up to 26 months for analytics purposes.
  • Shipping addresses — retained for 12 months after delivery for customer service and warranty purposes, then deleted.

8. Data Security

We implement industry-standard security measures including:

  • SSL/TLS encryption for all data in transit
  • Encrypted cloud storage with strict access controls
  • No storage of payment card information on our servers
  • Regular security reviews and updates
  • PCI-DSS compliant payment processing via Stripe

While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights regarding your Personal Data:

  • Access — request a copy of the Personal Data we hold about you.
  • Correction — request correction of any inaccurate or incomplete data.
  • Deletion — request deletion of your Personal Data (subject to legal retention requirements).
  • Portability — receive your data in a structured, machine-readable format.
  • Opt-out of marketing — unsubscribe from marketing emails at any time via the link in any email.
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time.
  • Object to processing — object to processing based on legitimate interests.

To exercise any of these rights, contact us at meow@catart.ai. We will respond within 30 days.

10. GDPR (European Users)

If you are in the European Economic Area (EEA), we process your Personal Data under the following legal bases:

  • Contract performance — to fulfill your order and deliver your portraits.
  • Consent — for marketing communications and non-essential cookies.
  • Legitimate interests — to improve the Service, prevent fraud, and conduct analytics.
  • Legal obligation — to comply with applicable laws and regulations.

Under the GDPR, you have additional rights including the right to lodge a complaint with your local data protection authority. The Company acts as the Data Controller for your Personal Data.

11. CCPA/CPRA (California Residents)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know — request disclosure of what personal information we collect, use, and share.
  • Right to delete — request deletion of your personal information.
  • Right to opt-out of sale or sharing — we do not sell personal information for monetary consideration. Our sponsorship data sharing (Section 5.1) and our use of third-party analytics and advertising services may constitute a "sale" or "share" under the CCPA/CPRA. You may opt out at any time using the methods below.
  • Right to correct — request correction of inaccurate personal information.
  • Right to non-discrimination — we will not discriminate against you for exercising your rights.

Categories of Personal Information Collected

  • Identifiers (Category A) — name, email, IP address, shipping address. Collected: Yes.
  • Customer Records (Category B) — name, address, phone number, purchase history. Collected: Yes.
  • Commercial Information (Category D) — products purchased, order history. Collected: Yes.
  • Internet Activity (Category F) — browsing history, interactions with the Service. Collected: Yes.
  • Biometric, Geolocation, Professional, Education (Categories C, E, G–K) — Not collected.

Do Not Sell or Share My Personal Information

We do not sell personal information for monetary consideration. However, our sponsorship data sharing (Section 5.1) and our use of third-party analytics and advertising tools may qualify as a "sale" or "share" under the CCPA/CPRA and similar state privacy laws (Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others).

To opt out, you can do any of the following:

  • Email us at meow@catart.ai with the subject line "Do Not Sell or Share My Info." We will process your request within 15 business days.
  • Click the unsubscribe link in any marketing email to opt out of partner emails and sponsor data sharing.
  • Enable the Global Privacy Control (GPC) signal in your browser. We honor GPC signals as a valid opt-out request.
  • Adjust your browser cookie settings to block analytics and advertising cookies.

Opting out does not affect transactional communications (order confirmations, shipping updates, etc.) and does not affect your ability to use the Service.

12. Behavioral Remarketing

We use remarketing services to advertise to you after you visit our Service. We and our third-party vendors use cookies and non-cookie technologies to serve ads likely to be of interest to you on third-party websites and apps.

You may opt out of personalized advertising through:

13. Email and SMS Marketing

We may use your email to send order confirmations, delivery notifications, and promotional content about new styles, features, offers, and (where you have opted in) co-branded messages from our sponsorship partners. We use Resend for email delivery.

If you provide a phone number and opt in to SMS, we may send transactional messages (such as physical-order shipping updates) and, where co-branded with a sponsor, a limited number of partner-related delivery messages. SMS message frequency varies. Msg & data rates may apply. Reply STOP to opt out, HELP for help. You can also opt out of SMS at any time by emailing meow@catart.ai.

You may opt out of marketing emails at any time by clicking the unsubscribe link in any email or by contacting us. Transactional emails (order confirmations, shipping updates) cannot be opted out of while you have an active order.

14. Do Not Track

Our Service does not respond to Do Not Track (DNT) browser signals. However, you can manage tracking through your browser cookie settings and the opt-out links provided in Section 12.

15. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and become aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from a child under 13 without parental consent, we will take steps to remove that information.

16. Links to Other Websites

Our Service may contain links to third-party websites not operated by us. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites.

17. Transfer of Data

Your information may be transferred to and maintained on servers located outside your state, province, or country where data protection laws may differ. Your consent to this Privacy Policy followed by your submission of information represents your agreement to such transfer. We will take all steps reasonably necessary to ensure your data is treated securely.

18. Business Transfers

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

19. Disclosure for Law Enforcement

We may disclose your Personal Data if required by law or in response to valid requests by public authorities (e.g., a court or government agency), or in the good faith belief that such action is necessary to comply with a legal obligation, protect our rights, prevent wrongdoing, or protect personal safety.

20. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email for significant changes. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

21. Contact Us

If you have any questions about this Privacy Policy, you can contact us:

CatArt.ai is operated by Riley Ventures LLC (DBA Acme Studio), 1615 South Congress Avenue, Suite 103, Delray Beach, FL 33445.