Last updated: October 21, 2026
Sole Proprietor (FOP) Viktor Stukalov, trading as PutMeIn.art, Ukraine, is the controller responsible for the processing described here. Tax ID: 2381111998. Registration number: 2010350000000014954. Contact: support@putmein.art.
Creem processes checkout, billing, payment and related transaction information under its Privacy Notice at https://www.creem.io/privacy. Its data-protection role depends on the activity. We receive information needed for fulfillment, support and related lawful purposes.
This Policy explains processing; visiting the site or accepting Terms is not consent to every use of personal information.
We receive photos, images, videos, likenesses, names, prompts, instructions, contact details and support communications you submit; selected products, order and delivery information; and records of permissions and privacy choices.
For creators, we process relevant account details, referral identifiers, attributed sales, commission and payout records. From payment and other authorized providers, we receive relevant transaction identifiers, payment/refund status and fulfillment or attribution information. Full card details are handled by payment providers, not stored by PutMeIn.art.
Website systems may collect IP addresses, browser/device information, timestamps, request logs, referral identifiers and visit information for the purposes below.
Where another person supplies your image or information, that uploader is the source. We require appropriate permission and provide any additional notice required of us by law. You may contact us even if you are not the purchaser.
We process information to create and deliver orders, communicate with customers, provide support, administer referrals and commissions, maintain security, prevent misuse, handle disputes and comply with legal obligations.
Where EU or UK data-protection law applies, relevant bases include:
A purchaser's contract does not automatically establish a legal basis for processing another adult's image. We establish the relevant basis and any additional conditions before processing. General user authorization is not a separate GDPR legal basis.
We process visual content to assess suitability and safety and create the requested fictional personalized product. This may involve analysis of facial and visual features to preserve likeness or place a person in a scene.
A photograph is not automatically special-category biometric data. Classification depends on the actual technical processing and applicable law. Where protected biometric processing or another activity requires additional notice, explicit consent or safeguards, those requirements apply before processing. Permission from an uploader does not replace a separate consent legally required from another depicted adult.
The service provides creative personalization, not identity-verification documents or proof of real events. Do not submit identity documents or unrelated sensitive information.
We work with professional third-party providers of AI-assisted content creation, media processing, hosting, storage, file delivery, communications, support, security, payments and referral administration. Relevant information is disclosed only for the purposes described here, subject to applicable law and appropriate contractual safeguards.
Providers may vary with the selected product and service availability. We assess their data handling and remain responsible for our own obligations. Authorized personnel or providers may review content where necessary for support, safety or troubleshooting, subject to applicable access restrictions.
Providers acting on our instructions are subject to appropriate processing arrangements. Some recipients, including the legal seller for transaction activities, have their own controller responsibilities. Professional advisers and authorities may receive limited information where necessary and lawful.
Creator reports contain only information needed for attribution and commissions. Referring a purchase does not give the creator access to private customer photos, prompts or personalized outputs.
Our permission to process ordinary orders does not include using customer content to train general-purpose AI models. Any optional use for that purpose requires a separate, informed choice where legally available. It is not a condition of purchasing the ordinary product.
Information identifying actual recipients is provided where required by law, including in response to an applicable access request. A change of supplier does not authorize a new undisclosed purpose.
We use limited visit measurement and technologies supporting security, requested sessions, privacy choices, payments and referral administration. We do not currently deploy separate advertising pixels or cross-site advertising trackers on this website.
Non-essential storage or access technologies require consent where applicable unless a legal exemption applies. Refusing optional technologies does not prevent an otherwise supported purchase. Built-in measurement and affiliate technologies are assessed under the same applicable rules.
Where applicable, privacy settings describe active technologies, purposes, durations and recipients to the extent needed for an informed choice. Continuing to browse is not consent. We do not use fingerprinting to bypass privacy choices. Refused tracking or browser restrictions may affect referral attribution.
Uploaded photos are private. Photo references are removed from delivered order records 72 hours after video delivery; unpaid orders are subject to a 48-hour photo-reference cleanup. These periods describe order-record cleanup and do not mean that every processing copy, stored object or backup is erased simultaneously.
Rendered video results on rendering-delivery hosting expire 28 days after rendering. This is measured from rendering, not from the delivery email or first download. The actual download-expiry information applicable to the order is provided with the offer. Save your own copy before expiry; expressly promised access remains binding.
Other processing copies and temporary files are retained only for the relevant production, delivery, correction, security or other lawful purpose and are subject to deletion or expiry when that purpose ends. Backup expiry and any necessary legal hold are assessed separately. A legal hold is limited to relevant information and reviewed when its basis ends.
Limited payment, accounting, consent and commission records may be retained for applicable legal requirements and claim periods. Those records do not automatically justify keeping every underlying photo or video. Where a fixed period cannot reasonably be specified, retention is determined by the outstanding purpose, applicable legal requirement, active dispute and relevant limitation period.
Request deletion at support@putmein.art. Your rights are not limited to removal of a visible order reference. Where information must lawfully be retained, we explain the reason and applicable period or criteria and restrict further use as required. We provide required retention information proactively and further details on request.
We operate from Ukraine and may use professional providers in other countries. Where international-transfer restrictions apply, processing requires a valid legal mechanism and any necessary supplementary safeguards, such as an applicable adequacy decision, standard contractual clauses or UK transfer instrument.
We provide information about destinations, adequacy and safeguards where required by applicable law. You may request further information and copies of applicable safeguards, subject to lawful redactions, at support@putmein.art. Accepting this Policy is not blanket consent to restricted transfers.
Depending on applicable law, you may request access, correction, deletion, restriction or portability; object to legitimate-interest processing; withdraw consent; and exercise applicable marketing, advertising or other opt-out and appeal rights. Withdrawing consent does not affect earlier lawful processing. Direct-marketing objections are respected.
Contact support@putmein.art. You need not have an account or be the purchaser. We may request proportionate verification and respond within applicable legal periods, ordinarily one month for EU/UK GDPR requests, explaining any lawful extension or refusal.
You may complain to your competent authority, including an EEA supervisory authority, the UK Information Commissioner's Office or the Ukrainian Parliament Commissioner for Human Rights, as applicable. This does not require first obtaining our permission.
We honor legally required preference signals and applicable authorized-agent and appeal rights. Any future activity requiring additional notices or opt-outs must have those protections before it begins.
A usable input, delivery email and payment confirmation are necessary for an ordinary personalized order. Optional marketing, showcase and tracking choices are not required to buy.
AI generation and automated quality, safety or fraud checks may affect acceptance or review of an order. Contact support to request review of a disputed restriction. Processing amounting to a solely automated decision with legal or similarly significant effects requires the additional basis, information and safeguards prescribed by law.
The service is intended for adult purchasers and uploaders. Only a parent or legal guardian with the required authority may submit an appropriate image of a minor. Report unauthorized submissions or use of a minor's image to support@putmein.art.
We request separate, specific permission before using private customer content in public examples, social posts or advertising. Permission identifies the material and intended use. Refusal does not affect the ordinary order. A tag, follow, review or creator membership is not automatically such permission.
You may withdraw consent for future uses. We explain any lawful limits concerning material already distributed and do not promise control over independent third-party copies. Marketing communications include an effective unsubscribe option. Necessary order, support, legal and security messages are separate.
We apply safeguards proportionate to the information and risks and make incident notifications required by law. No system is completely risk-free.
We update this Policy when relevant practices change and provide additional notice or obtain new consent where required. An update does not retroactively authorize an incompatible purpose.