Privacy policy
Effective from 6 September 2026
This page is written to be plain and precise. If anything is unclear, write to labas@dovanart.lt - we'll answer.
In short, if you're in a hurry:
Your photo is sent to the Google Gemini service (servers in the USA) - without that the portrait simply couldn't exist. We do not send your name or e-mail along with the photo. Before sending we strip the photo's metadata, including GPS location. We never sell photos, never use them for advertising and never train any models on them.
1. Who controls the data
Mantas Bakšys, sole proprietorship No. 1134180, Gedimino g. 22A-14, LT-44319 Kaunas, Lithuania. E-mail labas@dovanart.lt, tel. +370 615 79513.
2. What data we collect and why
No account is needed and we store no passwords. Your order link works as the key - it is long and random, so it cannot be guessed.
| Data | Why it's needed | Legal basis |
|---|---|---|
| Uploaded photo | To create and revise the portrait | Contract, or your consent while you only view previews |
| E-mail address | For the preview, the final file and correspondence | Contract |
| Dedication text | For the inscription on the portrait | Contract |
| IP + browser fingerprint | To protect free previews from abuse | Legitimate interest |
3. The photo's journey (the most important part)
- When you upload a photo, it is first cleaned: orientation is normalised and all metadata is removed, including GPS coordinates.
- The cleaned photo is sent to Google Gemini (Google Ireland Ltd. and Google LLC, USA) - the service that creates the portrait. Transfers outside the EU rely on the EU Standard Contractual Clauses.
- We send no name, no e-mail and no other data with the photo - Gemini receives only the image and a style description.
- The result and the original are stored keyed by the photo's hash (a string of digits), not by your name.
- Google does not use business-service data to train models. We don't train anything on your photos either, and we pass them to no one.
4. How long we keep it
On request we delete earlier - see section 6.
- If you don't order: photo and previews - up to 30 days, then deleted.
- If you order: photo and final file - 24 months, so you can request the file again.
- Accounting data (invoice, amount, date) - 10 years, as required by law.
- Abuse-protection marks (IP + browser) - 30 days.
5. Who data is shared with
We never sell or rent data to anyone.
- Google (Gemini) - photo processing.
- Supabase (EU, Frankfurt) - order and file storage.
- Resend - e-mail delivery.
- Vercel - website hosting.
6. Your rights
You may request a copy of your data, correction, deletion, restriction of processing, or object to it. Write from the e-mail you used when ordering - we answer within 30 days.
Immediate deletion: write "delete my photo" with your order number - we remove the images within 5 working days. Only what accounting law requires remains.
If you believe we handle data incorrectly, you may complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or your local supervisory authority.
7. Cookies
We use no advertising or tracking cookies, which is why there is no consent banner. The browser keeps only what the page itself needs to work (e.g. your chosen language). That data is shared with no one.
8. Whose photos may be uploaded
Upload only your own photos or photos of people who agreed. Children's photos may be uploaded only by parents or guardians. Uploading photos of strangers without their knowledge is not just our rule - it's the law.
9. Changes
If we change this policy, the date at the top changes. We announce substantial changes by e-mail to everyone with an active order.
Mantas Bakšys · Gedimino g. 22A-14, LT-44319 Kaunas, Lithuania · labas@dovanart.lt · +370 615 79513
Privacy policy · Terms of purchase · Dovanart