Legal
How MuseumPortraits handles personal information.
Last updated: April 15, 2026
This policy applies to information collected through the MuseumPortraits website, the purchase flow, support communications, and related operational tools used to run the service.
It covers information submitted directly by customers, information created during portrait generation and order processing, and technical information generated when people use the site.
The business named in this policy is MuseumPortraits.
Geographical and mailing address: 55 South 1st Street, Brooklyn, New York, USA.
Privacy questions, complaints, and formal data requests can be sent to hey@museumportraits.com. Unless MuseumPortraits tells you otherwise, the complaints address is the same as the mailing address listed above.
Where UK, EEA, or similar privacy laws apply, MuseumPortraits processes personal information on several lawful bases depending on the activity involved.
MuseumPortraits does not store full payment card numbers. Payment processing is handled by Stripe.
Transactional email is handled through Resend. Cloud storage and image-processing infrastructure are used to hold uploaded files, previews, and generated outputs.
MuseumPortraits discloses personal information to service providers and contractors only as needed to run the product. Depending on the activity, those disclosures can include contact details, account information, order details, uploaded or generated image assets, device or browser data, and customer-support records.
The categories of third parties that may receive personal information include payment processors, hosting and cloud-storage providers, email providers, analytics providers, security and monitoring vendors, and other vendors that help operate customer accounts, checkout, and order support.
MuseumPortraits does not knowingly sell personal information for money. If optional analytics, attribution, or similar advertising-related disclosures are treated as sale or sharing under applicable California law, MuseumPortraits offers an opt-out through the site's consent controls and support contact channels.
MuseumPortraits and its vendors may process personal information in countries other than the one where you live, including the United States. That can happen when customer data is stored with cloud providers, processed by payment vendors, or used in support, analytics, security, or email systems.
Where applicable law requires safeguards for international transfers, MuseumPortraits relies on appropriate contractual, legal, or operational measures made available by its vendors and processors, such as standard contractual commitments or comparable transfer safeguards. You can contact MuseumPortraits if you want more information about the transfer safeguards relevant to your personal information.
MuseumPortraits uses cookies and similar technologies to keep the site working, remember customer context, and respect your analytics choice through the site’s consent controls.
Essential or operational cookies support session continuity, account access, create-flow context, attribution continuity, and abuse prevention.
MuseumPortraits uses an explicit consent flow for product analytics. The site stores your analytics preference and uses Google Analytics Consent Mode so analytics starts in a denied state until you make a choice.
If you grant consent, the site may store analytics and attribution cookies and send event data to Google Analytics and PostHog so the team can understand landing-page performance and checkout behavior.
MuseumPortraits also uses error monitoring and diagnostics tooling, including Sentry, to capture crashes, technical context, and limited replay data needed to investigate problems. Those tools help keep the service stable and secure.
Customer uploads are stored in cloud storage and processed into browser-safe preview variants so the customer and the MuseumPortraits team can review them during the workflow.
If you remove an upload before it is linked to a job, the current product deletes the original file and its generated preview variants. Once an upload is attached to a portrait job or order, MuseumPortraits may keep it as part of the order record, support history, and asset library unless deletion is required by law or a later retention policy.
MuseumPortraits keeps information for as long as it is reasonably needed to operate the service, preserve order records, provide support, enforce policies, and comply with legal or accounting obligations.
Different categories of data may be retained for different periods. Order records, email logs, and generated assets may remain available after checkout so customers can continue using their portrait galleries.
MuseumPortraits shares information with service providers only as needed to run the product. That can include hosting providers, payment processors, analytics providers, email providers, and security or monitoring vendors.
MuseumPortraits may also disclose information when required to comply with law, enforce agreements, protect customers, or prevent fraud, abuse, or technical misuse.
MuseumPortraits uses administrative, technical, and organizational safeguards intended to protect personal information from unauthorized access, loss, misuse, or disclosure. No internet or storage system is guaranteed to be completely secure, but MuseumPortraits takes reasonable steps to protect customer information and to limit access to people and vendors who need it.
MuseumPortraits is responsible for the privacy practices described in this policy. Questions about privacy or data handling can be sent to hey@museumportraits.com, and postal inquiries can be sent to 55 South 1st Street, Brooklyn, New York, USA.
MuseumPortraits uses a consent-based approach for optional analytics. You can allow or decline analytics from the site banner or from the controls on this page.
MuseumPortraits does not knowingly sell personal information for money. However, some privacy laws define sharing broadly. To the extent optional analytics or similar vendor disclosures are treated as sharing under applicable law, MuseumPortraits offers an opt-out through the site’s analytics consent controls.
You may ask MuseumPortraits to review a request to access, correct, or delete personal information associated with your account, uploads, or orders, subject to legal exceptions and operational needs such as fraud prevention, order records, or accounting retention.
If local law allows you to use an authorized agent, MuseumPortraits may ask for information needed to verify both your identity and the agent’s authority before acting on the request.
If processing is based on consent, you may withdraw that consent at any time going forward. Withdrawing consent does not affect the lawfulness of processing that happened before withdrawal.
MuseumPortraits will not deny service or provide a lower quality of service simply because you exercised a privacy right, except where different treatment is reasonably related to the data involved or required for the product to function.
If you are in the UK, EEA, or another jurisdiction that gives you the right to complain to a privacy regulator, you may also lodge a complaint with the supervisory authority or regulator where you live, work, or believe a violation occurred.
MuseumPortraits is not intended for children to use on their own. The service should only be used by adults or by people using it with the involvement of a parent or guardian.
MuseumPortraits may update this policy as the product, vendors, or legal requirements evolve. If that happens, the updated version will be posted here with a new effective date.
Privacy questions or requests can be sent to hey@museumportraits.com.
Mailing address: 55 South 1st Street, Brooklyn, New York, USA.
Analytics Controls
You have not chosen yet. Google Analytics starts in denied consent mode until you make a choice, and PostHog stays off.