Privacy Policy

1. CONTROLLER

jiMADE AB, company reg. no. 559540-0754

Tellusborgsvägen 80, 126 37 Hägersten, Sweden

Email: support@anything.art

jiMADE AB is the controller for the processing described in this policy.

2. DATA WE PROCESS

• Uploaded images and prompts, and the images generated from them
• Contact details: email address, name, delivery and billing address, phone number
• Order data: orders, products, prices, delivery status, returns and complaints
• Payment data: payment method and status. Full card numbers are handled by Stripe, not by us
• Token balance and wallet transactions
• Support interactions: chat conversations, email and contact form submissions
• Technical data: IP address, device and browser information, session id, logs
• Usage data: events describing how you use the service (e.g. page views, saved designs)

3. PURPOSES AND LEGAL BASES

• Providing the service, generating images and fulfilling your order – performance of a contract
• Customer service and handling complaints – performance of a contract
• Accounting and tax obligations – legal obligation
• Security, fraud prevention and abuse protection – legitimate interests
• Statistics and improving the service – legitimate interests
• Newsletters and marketing – consent
• Non-essential cookies and measurement tools – consent
• Using images that identify a person in marketing – consent

4. UPLOADED IMAGES AND AI GENERATION

When you upload an image or write a prompt, the content is sent to the AI providers we use to generate the result. Images may contain personal data, and photos of people may in some cases contain sensitive data — only upload images you have the right to use.

We do not use your uploaded images to train our own AI models.

We do not use images that identify a person in marketing without your explicit consent.

5. RECIPIENTS AND PROCESSORS

We use external providers who process personal data on our behalf, in the following roles:

• Database and file storage
• Website hosting
• Queues and caching
• Payments
• Printing and delivery of your posters
• Sending emails about your order
• Error reporting and operations
• AI image generation
• The AI assistant in our support chat
• Notifications to our support team when a chat is handed over to a human

We require data processing agreements with the providers that process personal data on our behalf. Contact us and we will tell you which providers we currently use.

6. TRANSFERS OUTSIDE THE EU/EEA

Several of the providers above are established outside the EU/EEA or may process data there. Such transfers rely on the European Commission's standard contractual clauses or an adequacy decision, together with supplementary safeguards where needed.

If you would like to know which safeguard applies to a particular provider, contact us and we will tell you.

7. RETENTION

• Accounting records: seven years after the end of the calendar year in which the financial year ended, as required by the Swedish Accounting Act
• Order and customer data: seven years after the end of the calendar year in which the financial year ended, as required by the Swedish Accounting Act.
• Uploaded images and generated outputs: saved drafts are cleared automatically after 30 days. Images belonging to a placed order are kept as records of that order.
• Chat conversations: for as long as needed to handle and follow up your enquiry.
• Technical logs: for as long as needed for operations, security and troubleshooting.
• Token wallet: for as long as you hold tokens or an account with us. Tokens do not expire.

8. YOUR RIGHTS

You have the right to:

• access your personal data
• have inaccurate data corrected
• have data erased
• request restriction of processing
• object to processing based on legitimate interests
• receive your data in a machine-readable format (data portability)
• withdraw any consent you have given, at any time

Contact support@anything.art to exercise your rights. You can also request erasure directly via Delete my data.

9. COOKIES

We use cookies and similar technologies. Our Cookie Policy describes which ones and how to change your choice. You can change or withdraw your consent at any time via Cookie settings in the footer.

10. SECURITY

We apply technical and organisational measures to protect your data, including encryption in transit, access restrictions and logging of administrative access.

11. COMPLAINTS

If you believe we are processing your personal data unlawfully, you may complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se.

12. CHANGES

We may update this policy. The latest version is always available on this page, and the date below shows when it was last changed. We will inform you in advance of material changes. We do so by email or an in-service notice.