Your creations.
Your privacy.

Who is responsible for your information

Lava Grove Ventures LLC, a Florida limited liability company, operates Tangibl and is responsible for the personal information we handle through this service. Contact support@gettangibl.com for privacy questions or requests. This policy covers our website and connector API; third-party assistants and websites have their own privacy policies.

Information we collect

• Account information: account identifiers, email address, and profile information provided by your sign-in provider, such as your name and profile image. You can sign in with Google, Facebook or a one-time link sent to your email address. We do not receive your Google or Facebook password. Accounts we set up with an email and password (for example for app reviewers) sign in with those; passwords are stored only in hashed form by our authentication provider.
• Artwork and creations: images you or your assistant submit, image metadata needed to prepare them, previews, product choices, creation names, occasions, notes, and revision history. Images may contain personal information about you or other people. An assistant can send us an image from your conversation (one you attached or one it created), give us a link that we download the image from, or create a single-use upload page where you choose the image yourself. We receive only the image and details sent for that creation, not the rest of the conversation.
• Connections: the assistants you authorize (such as Meta’s Muse, OpenAI’s ChatGPT, or Anthropic’s Claude), the name the assistant registers with, permission grants, credentials or token-verification records, and connection activity such as creation, last use, and revocation.
• Orders: products, quantities, sizes, prices, payment references and status, recipient names, email and shipping addresses, fulfillment details, and shipment tracking. Stripe collects payment-card information; Tangibl does not receive or store your full card number or security code.
• Address book: shipping addresses you save for yourself and the people you send orders to, each with the label you give it (for example “Me” or “Mom”). Your first order’s shipping address is saved as “Me”. You can rename or delete saved addresses in your account at any time; they are deleted with your account.
• Support and feedback: messages, optional contact details, assistant names and context, order references, and photos submitted with problem reports. Feedback submissions use a keyed hash derived from the sender’s IP address to limit spam; hosting systems may separately process IP addresses in request logs.
• Technical information: cookies used for sign-in, request and error information, browser or device information available in requests, and operational logs needed to provide and protect the service.

How we use information

We use this information to authenticate you, save and retrieve creations, prepare previews and print files, process approved purchases, fulfill and track orders, handle refunds and support requests, secure the service, prevent abuse, troubleshoot problems, and meet applicable obligations.

Only submit images and recipient details you have permission to use. A gift recipient’s information is used to deliver and support the requested order. Our use of your artwork is for providing the requested service; we do not use customer uploads in our marketing without separate permission.

Pet portraits

Pet portrait photos: the photos you upload to make portraits, and the portraits we make from them. If a photo contains location data, we keep only an approximate area (about 10 km) to understand where our customers are, and remove the exact location and other photo metadata before storing it. We may review uploaded photos and the portraits we make from them to check quality and fix problems. Only the Tangibl team can see them, and we never use them in ads or posts without your permission.

To make your portraits, we send your photos to OpenAI, which checks what each photo shows and creates the portraits. OpenAI does not use them to train its models; it may keep them for up to 30 days to detect abuse, then deletes them.

Photos from people who never order are deleted 30 days after their last visit, with their portraits. If you order a print or buy a portrait pack, we keep them with your order. If we can’t use a photo you upload, we keep a copy for up to 14 days to fix upload problems, without its location.

If you save your portraits by email, we keep your email for up to 13 months after your last visit to send you your portraits, reminders, and occasional offers for holidays and new looks. Every email has an unsubscribe link. Your photos and portraits are deleted after 30 days.

Service providers and sharing

We share information needed for the relevant service with these providers:

• Supabase: account authentication, database records, and private artwork and support-image storage.
• Vercel: website and API hosting, request processing, and operational logging.
• PostHog: website analytics, hosted in its US region. Unless you opt out, we send page categories, navigation and selected account actions, browser and device information, and an anonymous visitor identifier. When signed in, activity is associated with your internal account ID rather than your email or name. Analytics events do not include your artwork, creation names, form contents, addresses, credentials, or payment details. We also record visits to our site, including the photos you upload and the portraits we show you, to understand how people use it and fix problems. Typed text such as your email is hidden. Recordings are deleted after 30 days.
• OpenAI: checks pet portrait photos and creates the portraits (see Pet portraits).
• Google: Google sign-in. The website also requests Google Fonts, which can disclose connection information such as your IP address and browser information to Google.
• Meta (Facebook): Facebook sign-in. If you choose it, Facebook shares your name, profile picture and email address with us; we do not post to Facebook or access your friends or other Facebook data.
• Meta (advertising measurement): unless you opt out, the Meta Pixel runs on our public pages and sends Meta the page you visit, browser and device information, your IP address and Meta’s cookie identifiers. If you later pay for an order in that same browser, we send Meta the purchase (order value, product types and quantity) with your email address, account ID and shipping city, state, ZIP code and country in hashed (scrambled) form, so Meta can match it to ads you saw. We use this to measure our Facebook and Instagram ads and to show Tangibl ads to people likely to be interested. We do not send Meta your artwork, creation names, street address or payment details. Meta’s use of this information is governed by the Meta Privacy Policy.
• Stripe: checkout, payments, refunds, payment records, and cards you choose to save for later checkouts. Stripe also provides the address form used to enter shipping addresses.
• Production and delivery providers: print files, product specifications, recipient and shipping information, and contact details needed to prepare and deliver orders.
• Your connected assistant, such as Meta’s Muse, OpenAI’s ChatGPT, or Anthropic’s Claude: information returned by the actions you authorize, such as creations, previews, products, cart contents, checkout links, and order status. If the assistant asks for it when you connect, and the connection page tells you so, it also receives the email address of your Tangibl account, for example so it can confirm which account is connected. Your conversations with the assistant are governed by its provider’s policy; Tangibl receives the content sent to our service, not automatic access to your entire chat history.
• Websites hosting a linked image: when an assistant gives us a link to an image, our servers download it from that website, which receives a standard request from Tangibl (not from your device).
• Email services: messages and contact details when you email support or receive a reply. Resend sends our emails (order updates, saved portraits, reminders and offers) and keeps the addresses they go to, with the details those emails show, such as links to your portraits.

We may also disclose information when required by law, to address fraud or security incidents, to protect legal rights, or as part of a business transfer subject to applicable privacy protections. Providers may process information in the United States or other countries where they operate.

Cookies and advertising

Tangibl uses cookies to maintain sign-in sessions and support authentication. Blocking them may prevent account features from working. PostHog analytics and Meta ad measurement run on our public pages and account area unless you opt out; PostHog stores a visitor identifier in your browser’s local storage and the Meta Pixel sets its own cookies (_fbp, and _fbc when you arrive from a Meta ad). You can opt out at any time using “Your privacy choices” in the website footer or in your account settings. Your choice is saved in that browser, so repeat it on other browsers and devices, or after clearing your browser data. Opting out does not prevent account features from working. It stops future collection and removes the Meta cookies from your browser; contact us to request deletion of earlier analytics associated with your account.

We do not sell personal information for money. Sending information to Meta for ad measurement and targeting may count as “sharing” for cross-context behavioral advertising or “targeted advertising” under some US state privacy laws. To opt out of this sharing, use “Your privacy choices” or send a Global Privacy Control signal; we also treat browser Do Not Track as an opt-out. Either signal turns off analytics and Meta ad measurement in that browser. You can also email us to opt out, and we will not discriminate against you for doing so. Third-party sign-in and checkout pages may use their own cookies.

Storage, retention, and deletion

Artwork and support photos are stored in private storage. Authorized account requests and limited-access links allow previews and fulfillment partners to retrieve the files they need. No method of storage or transmission can be guaranteed completely secure.

Some assistants can only show an image through a link. For them, we create signed preview links that show one creation’s product preview and expire after 7 days; anyone who has such a link can view that preview until it expires. Upload pages an assistant creates for you work once and expire after 30 minutes; we keep a record of each page with your account, storing only a scrambled (hashed) form of its link.

Saved creations remain available in your account until deleted; apart from pet portraits (see Pet portraits), they do not currently have a scheduled automatic expiry. A creation linked to an order may not be individually deletable through the account interface. You can request assistance at support@gettangibl.com.

You can request account deletion or use the deletion option in your account; see how to delete your data for step-by-step instructions. Deleting a Tangibl account does not automatically delete independent records held by Stripe, our production and delivery providers, your email provider, or your assistant, and it does not cancel an order. Support correspondence, backups, security logs, and records needed for legal obligations may have separate retention periods. Retention depends on the purpose of the record, unresolved support or order matters, provider settings, and applicable requirements; contact us about a specific record or deletion request.

Your choices and requests

You can manage saved creations and assistant connections in My Tangibl. Revoking a connection prevents further authorized use through that connection, but does not erase information already received by the assistant.

Email support@gettangibl.com to request access, a copy, correction, or deletion of your personal information, or to raise a privacy concern. Depending on your location, additional privacy rights may apply. We may need to verify your identity before acting and will respond within applicable legal timeframes. Do not send passwords, card information, or identity documents unless we arrange a suitable verification process with you.

Children’s information

Tangibl accounts and purchases are intended for adults aged 18 or older. Adults may provide family photos, including photos of children, when they have the necessary permission. We do not knowingly collect information directly from children under 13. If you believe a child has provided personal information directly to Tangibl, contact us so we can investigate and address it.

Policy updates

We will update the date above when this policy changes and provide additional notice or obtain consent when required. We will not treat an updated policy as permission for materially different use of previously collected information where consent is required.

Related information: Terms of Service · Reprints and Returns · Contact Tangibl.