Privacy Policy

Effective Date: May 3, 2026 · Last Updated: November 4, 2026

1. Introduction

Pablit.com (“Pablit,” “we,” “us”) is operated by Ethereal Software Services LLC, a New York limited liability company. This Privacy Policy explains what personal information we collect when you use the Pablit platform, how we use and share that information, the third parties that process information on our behalf, the rights you have over your information under U.S. and international privacy law, and how to contact us about your data.

This Policy is incorporated into our Terms of Service. Capitalized terms not defined here have the meanings given to them in the Terms of Service.

2. Information We Collect

We collect the following categories of personal information:

Account information — name, username, email address, password (stored as a salted hash), profile photo or avatar, country of residence (auto-derived from your IP if you do not supply it), date of birth (used only to verify minimum age and then discarded from the profile if the form does not surface it), and whether it is a business account.
Authentication identifiers — if you sign in with Google, the account identifier and email address Google returns to us, plus session cookies that keep you signed in.
Network and device data — the IP address used to register, the IP address used each time you sign in, the country your connection comes from (as estimated by our website protection provider), your browser type, and approximate device characteristics.
How you found us — when you create an account, the website that first sent you to Pablit (its name only, such as chatgpt.com or instagram.com, never the page you were on), any campaign tag on that link, and the first Pablit page you opened. Your browser keeps these until you sign up; we use them only to count which places bring people to Pablit.
Generation inputs and outputs — text prompts you submit, reference images you upload, and the AI-generated images we return. Prompts and outputs are stored against your account so you can revisit them.
Photographs of people, and what we make from them — if you use virtual try-on or product video, you upload a photograph of a person. We do not store that photograph. It is held in memory for the length of the request, sent to the AI provider that produces the result, and discarded. What we do keep is: (i) the image or video produced from it, stored against your account until you delete it; (ii) a record of your on-screen confirmation — your user ID, the date and time, the exact version of the wording you agreed to, and which feature you were using; and (iii) on the seller path, a one-way fingerprint (a hash) of the uploaded photograph. The hash is a one-way fingerprint: it cannot be turned back into the photograph, and it exists so that if an image is ever challenged we can tie it to the confirmation that was given for it without having kept the picture. A photograph of an identifiable person may count as sensitive personal information under the CCPA/CPRA and, in some readings, as biometric data under EU/UK law; we process it only to produce the output you asked for, on the basis of the consent you give on screen, and for no other purpose. We do not use it to identify or recognise anyone, we do not build face templates, and we do not use it to train any model of ours. See Terms of Service, Section 6.4.
Marketplace and order data — designs you publish, public posts, products you list, items in your cart, shipping address, billing details, and order history.
Payment data — we do not store full payment-card numbers. Card processing is handled by Stripe and Shopify (see Section 5). We retain transaction identifiers, the last four digits of the card, the cardholder name, and the billing country for receipts, fraud prevention, and tax reporting.
Credit and transaction history — your Pablit Credits balance, every credit purchase, usage, refund, bonus, or admin grant (audit trail required for accounting and dispute resolution).
Communications — emails you send to support, bug reports, reports of a problem with an order (with the photos you add), in-platform notifications you read or dismiss.
Reminder settings — unless you turn gift-day reminders off: your time zone, the country you're in, a count of the hours of the day you use Pablit, which reminders we have sent you, and, in Arabic-speaking countries, whether you get them in Arabic or English (at first from your browser's language), so they arrive at a sensible hour, in your language, and never repeat. Which days a reminder is about can depend on your country and the name on your account; we don't store any conclusion drawn from them. Turning reminders off deletes the time zone and hours; you can turn them off anytime in Settings.
Usage and analytics data — pages visited, features used, generation success/failure events, click and scroll patterns, and, only if you accept analytics cookies on the website, recordings of how you move through it (Section 6). Where this information is collected via cookies, see Section 6.

Customers of a store connected to Pablit

A seller can connect their own Etsy shop or Shopify store to Pablit, so that we make and ship the Pablit products it sells. When a customer of that store buys one of those products, the store sends us the order: the customer's name, their shipping address, and what they ordered. We do not collect this from the customer ourselves; we receive it only because the store sends that order to us.

We use it only to make the item, ship it to the customer, and send the order's status and tracking number back to the store. We share it only with the production and shipping partners who make and deliver the order (Section 5). We never contact the store's customers, never use their information for marketing, and never sell it.

For this information the store is in charge: it decides why the information is collected and tells its customers how it is used, and we handle it on the store's behalf under our Seller Terms. We erase the customer's name and street address 180 days after the order reaches us or, if it has not shipped or been cancelled by then, 180 days after it last changed; the state, postal code and country stay with the order record, which we keep as described in Section 4. When Shopify passes us a store's request to erase a customer's data, or the store's own data, we carry it out. A customer with a question about their data should ask the store they bought from, which can reach us at [email protected].

If you connect an Etsy shop

When you connect your Etsy shop to sell Pablit products, Etsy lets us reach it through its API with your permission. From Etsy we receive and keep: your Etsy user ID; your shop's ID, name, web address and login name; the country it is based in, its currency, whether it can take payments and whether it is on vacation; its numbers of active listings, sales and reviews, and its review average; the IDs of the shipping, processing, return and production-partner settings we use in your shop; the Pablit listings we create there, as they now stand in your shop (their state, title, description, tags, price and photos, and the IDs of their options); and, for each order of a Pablit product, the order number, the buyer's name and shipping address, what they ordered, the order total, its ship-by date and any note the buyer left at checkout. We do not keep buyers' email addresses.

We use this only to create and update your Pablit listings, show you your shop, listings and orders on Pablit, make and ship those orders and send their status and tracking back to Etsy, and charge you for them as our Seller Terms describe. We never sell it, and we do not use it to train any AI model. The keys Etsy gives us to act for your shop are encrypted before we store them.

We disclose it only in these ways: an order's buyer name, address and items go to the production and shipping partners who make and deliver it; when you ask our chat assistant about your shop, your shop's name, listing titles and order numbers go to Anthropic, which powers the assistant (Section 5), so it can answer (a buyer's name or address never does); Stripe, which processes our charges to your card, receives your shop's name and ID and the order number each charge is for; and the providers that host our systems and send our email handle it so the service can run.

You can disconnect your shop at any time on your Sell page, and deleting your Pablit account disconnects it too. If the shop holds Pablit listings, we first pause them in Etsy, so no buyer pays for something nobody will make, and keep our access until paid orders have shipped with tracking, for at most 30 days; orders that arrive meanwhile are still made. If our access has already ended, or the listings cannot be paused within a day, our access ends then and we tell you which listings may still be on sale. We erase the shop's name, web address and login name and your Etsy user ID 30 days after our access ends (a shop on hold for unpaid charges keeps them until the hold is lifted, then 30 days); its shop ID stays with the orders made through it. Its buyers' names and street addresses are erased as Section 4 describes. Questions about selling with Pablit or your Etsy connection? Email [email protected].

3. How We Use Your Information

We use your information to:

provide the platform — generate images, fulfill orders, run the marketplace, manage your credit balance and refunds;
authenticate you and keep your account secure (including verifying that login attempts come from contexts consistent with your registration);
communicate with you — transactional emails (order confirmations, shipping updates, payment receipts, password resets), service announcements, and, only if you have opted in, periodic newsletters;
if you turn on notifications, send gift-day and come-back reminders, at a time of day you usually use Pablit, at most one a week, unless you turn them off in Settings;
detect, investigate, and prevent fraud, abuse, intellectual-property complaints, and Terms-of-Service violations;
operate, debug, and improve the platform — including using aggregate, de-identified usage data to inform product decisions and, if you allowed it, watching session recordings to find where the site is confusing or broken;
comply with applicable laws, court orders, valid law-enforcement requests, and tax obligations.

Legal bases (EU/UK users). We rely on the following GDPR/UK-GDPR legal bases: contract (to provide the service you signed up for), legitimate interests (security, fraud prevention, product analytics, and gift-day reminders to members who turned on notifications, which you can turn off at any time), consent (marketing emails, non-essential cookies, and any photograph of a person you upload for try-on or video), and legal obligation (tax, accounting, valid government requests). Consent to a photograph of a person is given explicitly on screen before the photograph is used, is recorded against the exact wording shown, and can be withdrawn for the future at any time by not using the feature and by deleting what it produced.

4. Data Retention

We retain personal information only as long as necessary for the purposes described above. Specific retention periods:

Account data (your profile, the designs and pictures you made or uploaded, and your posts, comments and likes) — for the lifetime of your account, plus up to 30 days after deletion to allow recovery of accidentally deleted accounts; then it is erased. A design an order was made from stays with the order record, and one on a shop listing or in another member's cart stays while that does. If you are still selling when you delete it (a connected store, an order being made, or a charge not yet settled), we keep what we need to finish and bill those orders until they are settled; anything the law requires us to preserve is kept as long as it requires.
Order, invoice, and payment records — up to 7 years after the transaction, to comply with U.S. federal and state tax recordkeeping rules and Shopify/Stripe reconciliation.
Reports of a problem with an order — the photos you send and what you write are deleted 2 years after we settle the report or, if it is never settled, 2 years after it last changed; if you delete your account, those of a settled report go with your account data. The record of what was wrong and how we put it right stays with the order record.
Approvals of how a design will be stitched — the images you were shown and what you decided are part of the order record and are kept with it, up to 7 years; then the images are deleted.
Our record of an order held up in making or returned — deleted 2 years after it is resolved.
Customers of a store connected to Pablit — their name and street address, and any note they left at checkout, are erased 180 days after the order reaches us or, if it has not shipped or been cancelled by then, 180 days after it last changed; the state, postal code and country stay with the order record, which is kept as above for tax.
A store that has been disconnected — an Etsy shop holding Pablit listings keeps our access until those listings are paused and paid orders have shipped with tracking, for at most 30 days (see If you connect an Etsy shop); any other store loses it at once. Its name, web address, login name and account ID are erased 30 days after our access ends, or, for a store on hold for unpaid charges, 30 days after the hold is lifted; its store ID stays with the orders made through it.
Our chat assistant's activity log — a record of the tools the assistant used in each conversation and what they returned, with images and credentials removed. For a seller it can include their shop's name, listing titles and order numbers. Deleted after 90 days.
Connected-app & API access logs — 13 months from the date of the recorded action, then automatically purged.
Generation inputs and outputs — for the lifetime of your account, then with your account data; you may delete individual designs at any time.
Photographs of people — not retained at all. The uploaded photograph is used for the request and discarded.
Images and videos made from a photograph of a person — for the lifetime of your account, or until you remove them. Removing a video deletes our stored copy of it. Copies you have already published elsewhere, downloaded, or sent to someone are outside our control.
Records of your acceptance of the Seller Terms — the version, the date, and the IP address and browser you accepted from. Kept as long as the order records made under them (up to 7 years), because they are the agreement those orders were made under.
Records of your photo confirmations — the date, the wording version, the feature, and (on the seller path) the one-way hash of the photograph. Kept for the lifetime of your account so that a challenged image can be tied to the confirmation given for it.
Session recordings — 30 days from the visit, then deleted; sooner if your account is deleted.
Server access logs — up to 90 days, then rotated out.
Our staff's access log — which of our staff opened which admin page, and when; 13 months, then automatically purged.
Backups — encrypted backups may persist for up to 90 days after deletion before being overwritten in their normal lifecycle.
Anonymized analytics — may be retained indefinitely once stripped of identifiers.

We may also retain limited information beyond these periods where required by law (e.g., to respond to subpoenas, defend legal claims, or maintain a record of repeat-infringer accounts under 17 U.S.C. § 512).

5. Third-Party Service Providers

We share personal information with the following processors only as needed for them to perform services for us. Each is contractually bound to use the data only on our instructions and to comply with applicable privacy law.

Stripe, Inc. — payment processing for credit purchases, except those billed through a connected Shopify store or bought in our Android app (both below). Receives your name, email, billing address, and payment-card details (which never touch our servers). See stripe.com/privacy.
Shopify Inc. — checkout, invoicing, and order management for marketplace purchases. Receives your shipping/billing details, item selection, and payment data through Shopify-hosted checkout. If you connect your own Shopify store to sell, we also send it the listings you create and receive the orders it sends to Pablit, using the access you grant when you install our app; and the credit packs you buy are billed by Shopify to that store, so we send Shopify the pack and its price and keep Shopify's charge ID with the purchase. See shopify.com/legal/privacy.
Apple Inc. — only in our iPhone app: (a) Sign in with Apple, if you choose it: Apple gives us an identifier for your Apple account, the email you choose to share (which may be a private relay address) and, the first time, your name; we keep the token Apple issues, encrypted, so we can revoke it when you delete your account; (b) App Store purchases of credit packs: Apple takes the payment, and we receive the purchase, its price, currency and transaction ID, and give Apple a random identifier for your account (never your email) so the purchase reaches the right account; (c) if you turn on notifications in the iPhone app, Apple Push Notification service delivers them: it receives your device's push token and each notification's title, text and link. See apple.com/legal/privacy.
Print-on-demand fulfillment vendor(s) — produces, packages, and ships the physical products you order. Receives the design files for ordered items, your shipping address, recipient name, and contact email so the items can be produced and delivered. For an order from a store connected to Pablit, it receives that customer's name and shipping address instead. For a parcel to Brazil, it also receives the CPF or CNPJ given at checkout, which Brazil's customs requires; we pass it on and do not keep it. We may change vendors over time without prior notice.
Cloudflare, Inc. — website delivery, protection against attacks, and secure connections. Receives technical details of each request to the platform, such as your IP address. We use the country it estimates from your connection to fill in your country when you register. When you sign up, ask for a password reset, or sign in after several wrong passwords, its human-verification check confirms that a person rather than an automated program is using the form; to do this it reads signals from your browser and device, and it usually needs nothing from you. See cloudflare.com/privacypolicy.
Google LLC — (a) Google OAuth for sign-in if you choose that path; (b) Google Analytics 4 (loaded only after you accept analytics cookies) for aggregate usage statistics; (c) Google Cloud (Imagen) and Gemini APIs as AI generation backends when you select those models; (d) a text-moderation service, which receives text you post so we can screen it for abuse; (e) Google Play billing for credit packs bought in our Android app: Google takes the payment, and we receive the purchase, its order ID, billing region and price, and give Google a random identifier for your account (never your email) so the purchase reaches the right account; (f) Firebase Cloud Messaging, which delivers notifications to your browser and to our Android app if you turn them on: it receives your browser's or device's push token and each notification's title, text and link. See policies.google.com/privacy.
OpenAI, L.L.C. — AI generation backend (GPT Image 2.5 family, GPT-5 reasoning) when you select those models. Your prompts and any reference images you submit are sent to OpenAI to produce the requested output. Per our agreement with OpenAI, your prompts and outputs are not used by OpenAI to train its models. See openai.com/policies/privacy-policy.
Black Forest Labs GmbH — AI generation backend (FLUX 3 Image). Receives prompts and reference images for the requested operation. See blackforestlabs.ai/privacy-policy.
Anthropic PBC — powers the Pablit chat assistant. When you use chat, your messages and any images you attach in that conversation are sent to Anthropic to produce the reply. If you ask it about a shop you connected, what it reads about that shop goes too: the shop's name, your listing titles and your order numbers, never a buyer's name or address. See anthropic.com/legal/privacy.
Runway AI, Inc. — video generation. If you make a product video, the still image it is made from is sent to Runway, and Runway returns the video. Where that still is a virtual try-on, the image sent contains the face of the person in the photograph you supplied, and for a talking video Runway also generates the synthetic voice. See runwayml.com/privacy-policy.
Pebblely — product background generation. Receives the image you are working on and the background you describe. See pebblely.com/privacy.
Apollo.io (ZenLeads, Inc.) — a website tracker, loaded only after you accept analytics cookies, that tells our sales team which companies visit the site, from the visit's IP address and pages viewed. See apollo.io/privacy-policy.
Etsy, Inc. — only if you connect an Etsy shop to sell. We send the listings you create, receive the orders your buyers place, and send their tracking back, using the access you grant at connect time. What we receive from Etsy, and what you control, is described in If you connect an Etsy shop. The term ‘Etsy’ is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy. See etsy.com/legal/privacy.
Ideogram AI, Inc. — AI generation backend (Ideogram 4.0). Receives prompts for image generation. See about.ideogram.ai/legal/privacy-policy.
Amazon Web Services, Inc. — storage for generated images and uploaded reference images, and host of the servers and database that run Pablit, including session recordings (Section 6). See aws.amazon.com/privacy.
Functional Software, Inc. (Sentry) — error and crash reporting for the website and our phone app, so we can find and fix what breaks. When something goes wrong it receives the error and where in our code it happened, the page path (never its query string), your browser or device, operating system and app version, your IP address, if you are signed in, your account number, username and email address, and, for an error on our servers, details of the request being handled at the time. Passwords, cookies and payment-card details are removed before anything is sent. Kept for up to 90 days. See sentry.io/privacy.
Email delivery providers — transactional and (if opted in) marketing email is sent through third-party email infrastructure. They receive your email address and message content for the purpose of delivering the email.

Photographs of people. When you use virtual try-on or product video, the photograph you upload — and any image made from it — is sent to the AI provider selected for that operation from the list above, which processes it to produce the result and returns it to us. That transmission is the reason the feature asks you to confirm, before the photograph is used, that it is of you or of another adult who has agreed to it. We do not send a photograph of a person to any provider not listed above, and we do not use it for anything other than producing the output you asked for.

We do not sell your personal information to advertisers or data brokers, and we do not share it with third parties for their independent marketing purposes. We do not use photographs of people, or the images and videos made from them, to train any model.

Other disclosures. We may disclose information when (a) compelled by valid legal process (subpoena, court order, search warrant) and we believe disclosure is required by law; (b) necessary to protect the rights, safety, or property of Pablit, our users, or the public; (c) part of a corporate merger, acquisition, financing, reorganization, or asset sale (in which case we will notify affected users by email and/or in-platform notice).

6. Cookies and Tracking

We use cookies and similar technologies for three purposes: (i) strictly necessary — session, authentication, security, cart state, cookie-consent state itself; (ii) functional — remembering preferences such as theme, language, dismissed prompts, and your time zone if you turned on gift-day reminders; (iii) analytics — Google Analytics 4 to understand aggregate usage, and Apollo.io to see which companies visit. Cloudflare Web Analytics also counts page views without cookies or anything stored on your device. Strictly necessary cookies are always on; functional and analytics cookies load only after you accept on the cookie banner. See our Cookies Policy for the cookie inventory.

Session recordings. If you choose “Accept all” on the cookie banner, we record how you move through the website: the layout of each page and where you click, tap and scroll. We use this only to find where the site is confusing or broken and to make it better. A recording never contains pictures (not your designs, private or not, and not any photograph of a person), anything you type, or what members have written: these are removed in your browser before anything is sent, and our servers remove pictures and typing again before anything is kept. We do not record seller pages, your cart, checkout, order pages, account settings or connected apps, and we do not record in our phone app. Recordings are made and stored by Pablit itself, on the servers listed under Amazon Web Services in Section 5; they are not sent to any analytics company, not sold, not used to train any model, and viewed only by authorised Pablit staff, each viewing logged. If you are signed in, a recording is linked to your account so it is deleted with it. Recordings are deleted after 30 days. We rely on your consent; you can withdraw it at any time by choosing “Essential only” on our Cookies Policy page, which stops recording at once.

7. Your Rights

Depending on your jurisdiction, you have the following rights with respect to your personal information.

All users: the right to (a) access a copy of the personal information we hold about you; (b) correct or update inaccurate information; (c) delete your account and associated data, subject to the retention exceptions in Section 4; (d) export a portable copy of your designs, posts, and account data; (e) close your account at any time.

Residents of the EEA, UK, and Switzerland (GDPR / UK-GDPR): in addition, the right to restrict or object to processing, the right to withdraw consent at any time (without affecting processing already done in reliance on prior consent), and the right to lodge a complaint with your national data-protection authority. Our lead supervisory contact is [email protected].

Residents of California (CCPA / CPRA): the right to know what personal information we collect, use, disclose, and (if applicable) sell or share; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the “sale” or “sharing” of personal information; the right to limit use of sensitive personal information; the right to non-discrimination for exercising any of these rights. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. To exercise any California right, email [email protected] with the subject “CA Privacy Request.” You may designate an authorized agent to make a request on your behalf.

We will respond to verifiable requests within the time frames required by law (generally 30 days for GDPR, 45 days for CCPA, extendable once where permitted). To verify your identity we may ask you to log in or to confirm information already on file.

8. Children's Privacy (COPPA)

Pablit is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, please contact [email protected] and we will delete the information and close any associated account. The email signup form requires a date of birth and rejects accounts below the minimum age, and the server applies the same limit. If you sign up with Google we do not receive a date of birth, so on that path you confirm your age on screen before the account is created.

The same limit of 18 applies inside try-on and product video. Those features use a photograph of a person, so they may only be used with a photograph of someone 18 or over — including your own. We do not detect the age of a person in a photograph; the confirmation you give is the control. If you believe an image or video on Pablit shows a minor, report it at pablit.com/report-content and we will act on it.

9. International Data Transfers

Pablit is operated from the United States. If you access the platform from outside the United States, your personal information will be transferred to, processed in, and stored in the United States and in the regions where our service providers operate. The U.S. and other countries may have data-protection laws that differ from those in your country. Where required, we rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or equivalent mechanisms with our processors to provide appropriate safeguards for international transfers.

10. Security

We use a combination of technical and organizational measures to protect your information, including TLS encryption in transit, encrypted storage at rest, passwords and access keys stored only as one-way hashes, strict access controls on production systems, audit logging on sensitive operations, and routine security reviews. No system is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last Updated” date at the top of this page and, where appropriate, notify you by email or in-platform banner before the change takes effect. Your continued use of the platform after the effective date constitutes acceptance of the updated Policy.

12. Contact Us

For privacy questions, requests, or complaints, contact us at:

Ethereal Software Services LLC — Privacy Office
Email: [email protected]
General support: [email protected]
Copyright/DMCA: [email protected]
Other legal: [email protected]

13. Corporate Information

Pablit.com is operated by Ethereal Software Services LLC, a limited liability company organized under the laws of the State of New York, United States.