Privacy policy
Effective from 6 September 2026
This page is written to be plain and precise. If anything is unclear, write to labas@dovanart.lt - we'll answer.
In short, if you're in a hurry:
Your photo is sent to the Google Gemini service (servers in the USA) - without that the portrait simply couldn't exist. We do not send your name or e-mail along with the photo. Before sending we strip the photo's metadata, including GPS location. We never sell photos, never use them for advertising and never train any models on them.
1. Who controls the data
Mantas Bakšys, sole proprietorship No. 1134180, Gedimino g. 22A-14, LT-44319 Kaunas, Lithuania. E-mail labas@dovanart.lt, tel. +370 615 79513.
2. What data we collect and why
No account is needed and we store no passwords. Your order link works as the key - it is long and random, so it cannot be guessed.
| Data | Why it's needed | Legal basis |
|---|---|---|
| Uploaded photo | To create and revise the portrait | Contract, or your consent while you only view previews |
| E-mail address | For the preview, the final file and correspondence | Contract |
| Dedication text | For the inscription on the portrait | Contract |
| Name, delivery address and phone (only when you order a canvas) | To make and deliver the canvas and to notify you about the parcel | Contract |
| IP + browser fingerprint | To protect free previews from abuse | Legitimate interest |
3. The photo's journey (the most important part)
- When you upload a photo, it is first cleaned: orientation is normalised and all metadata is removed, including GPS coordinates.
- The cleaned photo is sent to Google Gemini (Google Ireland Ltd. and Google LLC, USA) - the service that creates the portrait. Transfers outside the EU rely on the EU Standard Contractual Clauses.
- We send no name, no e-mail and no other data with the photo - Gemini receives only the image and a style description.
- The result and the original are stored keyed by the photo's hash (a string of digits), not by your name.
- Google does not use business-service data to train models. We don't train anything on your photos either, and we pass them to no one.
4. How long we keep it
On request we delete earlier - see section 6.
- If you don't order: photo and previews - up to 30 days, then deleted.
- If you order: photo and final file - 24 months, so you can request the file again.
- Accounting data (invoice, amount, date) - 10 years, as required by law.
- Abuse-protection marks (IP + browser) - 30 days.
- Canvas delivery data (name, address, phone) - 24 months, like the order.
5. Who data is shared with
We never sell or rent data to anyone.
- Google (Gemini) - photo processing.
- Supabase (EU, Frankfurt) - order and file storage.
- Resend - e-mail delivery.
- Vercel - website hosting.
- Stripe (Stripe Payments Europe Ltd., Ireland) - payments and, for a canvas order, collecting the delivery address.
- merchOne (Picanova GmbH, Germany) and its courier - only for a canvas order: name, delivery address, e-mail, phone and the portrait file, so the canvas can be made and delivered.
6. Your rights
You may request a copy of your data, correction, deletion, restriction of processing, or object to it. Write from the e-mail you used when ordering - we answer within 30 days.
Immediate deletion: write "delete my photo" with your order number - we remove the images within 5 working days. Only what accounting law requires remains.
If you believe we handle data incorrectly, you may complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or your local supervisory authority.
7. Cookies, statistics and advertising
The page keeps a random visitor and visit number in your browser storage. This shows us at which ordering step people stop and lets us test different versions of the page. We do not store your email or IP address with this data, and we keep the records for up to 400 days.
To measure advertising we may use the Meta (Facebook, Instagram), Google and TikTok pixels. They may use their own cookies under those companies' privacy policies. You can turn them off in your browser settings or with an ad blocker. The browser storage also keeps what the page itself needs to work (e.g. your chosen language and an unfinished order).
8. Whose photos may be uploaded
Upload only your own photos or photos of people who agreed. Children's photos may be uploaded only by parents or guardians. Uploading photos of strangers without their knowledge is not just our rule - it's the law.
9. Changes
If we change this policy, the date at the top changes. We announce substantial changes by e-mail to everyone with an active order.
Mantas Bakšys · Gedimino g. 22A-14, LT-44319 Kaunas, Lithuania · labas@dovanart.lt · +370 615 79513
Privacy policy · Terms of purchase · Dovanart