Privacy Policy

Last updated: 16 August 2026

This policy explains what personal data Troveby collects, why, the legal bases we rely on, who we share it with, how long we keep it, and the rights you have. We collect as little as we can.

1. Who is responsible for your data

Troveby is operated by 耐科思创(北京)科技有限公司 (“Troveby”, “we”, “us”, “our”). Our postal address is 北京市海淀区永嘉南路9号院1号楼3层101，中国. You can reach us any time at support@troveby.com. For the purposes of data-protection law, we are the controller of the personal data described here (except payment data, for which Paddle is responsible — see below).

2. What we collect

• Tribute inputs: the photo you upload and the pet’s name and memories you enter.
• Account data (optional): your email address and a securely hashed password.
• Purchase data: when you buy, our reseller Paddle collects and processes your payment and billing details. We receive only limited confirmation data (such as that a payment succeeded and a receipt reference); we never see or store your full card number.
• Communications: messages you send us and the emails we send you.
• Usage analytics & technical data: a first-party, cookieless measure of page views and engaged time using a short-lived per-day pseudonym derived from your IP address and browser, plus basic server logs. We do not use third-party advertising or tracking, and we honour Global Privacy Control.

3. Why we use it, and our legal bases

• To provide the Service — create, deliver and let you manage your tribute (performance of a contract).
• To run our business securely — prevent abuse, keep the site reliable, and measure aggregate usage (our legitimate interests, balanced against your rights).
• To communicate — send verification, password-reset, order and delivery emails (contract and legitimate interests).
• To meet legal obligations — tax, accounting and responding to lawful requests.

4. AI processing of your inputs

To create your tribute, your photo and the text you enter are sent to the third-party AI models that generate the portrait and the tribute on our behalf — see Section 5 for who they are and Section 6 for where they’re based. These inputs are used only to produce your result, and are never used to train any AI model.

5. Who we share data with (sub-processors)

We share the minimum necessary with providers who act on our behalf, under contract:

• Paddle — payment processing, as reseller and Merchant of Record.
• Our email provider — to send transactional emails (verification, password reset, order and delivery notices).
• Our hosting provider — to run the website, database and file storage.
• ModelVerse, an AI routing service, and the models it calls on our behalf — Alibaba’s Qwen and ByteDance’s Doubao-Seedream (portrait), and Anthropic’s Claude (tribute text) — to turn your photo and your words into the portrait and tribute. See Section 6 for where these providers are based.

We do not sell your personal data, and we do not share it for third-party advertising.

6. International transfers

Our providers may process data in countries other than yours. Of the AI sub-processors named in Section 5, ModelVerse, Alibaba and ByteDance are based in mainland China, and Anthropic is based in the United States. Our hosting, database and file storage run on US-based infrastructure. Where personal data is transferred internationally, we rely on appropriate safeguards (such as the providers’ standard contractual clauses) to protect it.

7. How long we keep it

Photos and generated results are kept so you can view and download your tribute, and are deleted from storage when you delete the tribute or your account. Account data is kept until you delete your account. Analytics rows are retained for up to 90 days, and the raw IP behind a request is scrubbed after a few days. We may keep limited records (such as purchase references) for as long as needed to meet legal and accounting obligations.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent. You can delete a tribute from its own page, or delete your account and every tribute in it from your settings — deletion is real, not just a status change. To exercise any other right, email support@troveby.com. If you are in the EU/UK you may also complain to your local data-protection authority. If you are in California, we do not sell or “share” your personal information as those terms are defined under the CCPA.

9. Children

The Service is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

10. How we protect your data

We use encryption in transit, store passwords only as salted hashes and session tokens only as hashes, keep uploaded files in private storage served through time-limited links, and restrict administrative access.

11. Cookies

We use only the cookies we need: an essential, HttpOnly cookie to keep you signed in, and a small cookie to remember your language and any analytics opt-out. We do not use advertising or third-party tracking cookies.

12. Changes

We may update this policy; the “last updated” date above shows the current version, and we will highlight material changes.

13. Contact

For any privacy question or request, email support@troveby.com.

← Back to home