Create Prints
Shop Prints

Privacy Policy

Effective date: 20 May 2026  ·  Last updated: 11 August 2026

This policy explains how Viable Digital Limited, trading as Create Prints ("Create Prints", "we", "us" or "our"), collects and uses personal information through createprints.ai, our API, and our Model Context Protocol (MCP) integrations (together, the "Service").

Viable Digital Limited is the controller of this information. We are registered in England and Wales under company number 13599956. Our registered office is Office 4, 8–9 Rodney Road, Portsmouth, England, PO4 8BF. You can contact us about privacy at [email protected].

1. Public and Private Artwork

Website generations are public. When you generate artwork directly on createprints.ai, the prompt, generated artwork, and related title or description are published as part of the public Create Prints gallery and product catalogue. They may be viewed, shared, and indexed by search engines. Do not include confidential information or personal information about yourself or anyone else in a public prompt or upload.

Connected-chat generations are private. Artwork and prompts submitted from a private ChatGPT conversation or another private AI client connected through our MCP service are visible only to the authenticated user and the service providers needed to generate, store, print, and deliver the artwork. We do not add those private generations to the public gallery unless you separately choose to publish them.

2. Information We Collect

  • Account information: email address, account ID, authentication-provider identifiers, and account settings.
  • Order and delivery information: customer and recipient names, email address, delivery address, telephone number where supplied, order contents, product options, transaction references, shipment status, and support history.
  • Payment information: our payment provider processes card or payment-account details. We receive transaction status, payment references, and limited billing information, but we do not store full payment-card numbers.
  • Prompts and content: prompts, uploaded or imported images, generated artwork, artwork metadata, and print-ready files. Images may incidentally reveal personal or sensitive information, so only submit content you are entitled to use.
  • Room analysis information: when you ask us to suggest artwork for a room, we analyse any room photograph you provide in order to measure its colour palette. We keep the resulting measurements — colour values, how much of the room each covers, and summary tone, brightness and saturation figures — together with the room you describe, the artwork we suggested, the fit scores we calculated, and any preference you tell us between suggestions. We do not keep the room photograph itself. It is analysed while your request is processed and then discarded, and it is never published in the public gallery.
  • Service and device data: IP address, user-agent, referring URL, timestamps, API or MCP tool calls, response and error codes, authentication events, device information, and security logs.
  • Communications and partner information: support messages and, if you apply to our partner programme, your display name, contact email, website or channel, application, referral and commission records, and payout status.

3. Purposes and Lawful Bases

  • Contract: to create and manage accounts, generate artwork, publish website generations as described above, suggest and score artwork for a room you describe or photograph, process orders, take payment, manufacture and deliver products, provide private MCP features, and administer partner relationships.
  • Legal obligation: to keep accounting and transaction records, respond to lawful requests, protect consumer rights, and meet tax, product-safety, fraud-prevention, and regulatory obligations.
  • Legitimate interests: to secure and troubleshoot the Service, prevent fraud and abuse, enforce our Terms, answer support requests, understand service performance, and improve reliability. Our legitimate interests are operating a safe, reliable ecommerce and artwork-generation service. We consider the necessity and effect on users before relying on this basis.
  • Consent: where we specifically ask for consent, such as for optional electronic marketing or non-essential tracking. You may withdraw consent at any time.

We do not use private prompts or private artwork to train our own general-purpose AI models, and we do not use the content of your images or the text of your prompts to train any model of ours. AI-generation providers process submitted content to return the requested output under their arrangements with us. We may use de-identified or aggregated service data to measure and improve performance where it no longer identifies an individual.

We do build and train our own models for one specific purpose: matching artwork to a room. These models learn from room analysis information, the artwork we suggested, and which suggestions people preferred or ordered — that is, from colour measurements and outcomes. They do not learn from room photographs, prompt text, or the content of images, none of which form part of their training data. We use anonymised information for this wherever it will serve the purpose, and room analysis information is anonymised when an account is deleted, as described in section 5.

We rely on our legitimate interest in improving the accuracy of our recommendations, having considered that we use colour measurements rather than the photograph itself and that the effect on you is limited. This does not involve automated decisions that produce legal effects or similarly significantly affect you. You may object to this use at any time under section 7, and we will stop unless we can show compelling legitimate grounds that override your interests.

4. Who Receives Information

We disclose only the information reasonably needed for the relevant service to the following recipient categories:

  • payment, billing, fraud-prevention, and payout providers;
  • account authentication, database, cloud-hosting, and security providers;
  • AI generation providers that process prompts and source images;
  • print-production, fulfilment, postal, courier, and tracking providers, which receive delivery details, order specifications, and the artwork file needed to make and deliver the product;
  • email, support, and operational communications providers;
  • professional advisers, insurers, auditors, regulators, courts, law enforcement, or another party where disclosure is required by law or reasonably necessary to establish or defend legal rights; and
  • a buyer or successor if our business or relevant assets are sold or reorganised, subject to appropriate confidentiality safeguards.

We do not sell personal information or share it for cross-context behavioural advertising.

5. Retention

Retention means how long we keep each type of information. We use the following periods or criteria:

  • account information is kept while the account is active and afterwards only for as long as needed to close the account, resolve disputes, and meet legal obligations;
  • order, payment, refund, tax, and partner-payout records are kept for the period required by accounting, tax, limitation, and fraud laws, which will normally be up to six years after the relevant transaction or the end of the relevant accounting period;
  • public website prompts and artwork remain public while included in the gallery or catalogue. You may request removal of personal information contained in public content, subject to applicable legal exceptions;
  • private artwork and print files are kept for as long as needed to provide generation, checkout, fulfilment, reprint, account, and order support features. We periodically review them and delete or anonymise them when they are no longer needed, unless an active dispute or law requires longer retention; and
  • room analysis information is kept in a form linked to your account while the account is active, so that we can suggest artwork for rooms you have already told us about. When you delete your account we anonymise this information rather than erase it: we remove the link to your account and the identifier that would group your rooms together, leaving colour measurements and the resulting suggestion that are no longer associated with you or with any photograph. We keep those anonymised measurements to test and improve how accurately we match artwork to interiors. We also review this information periodically and delete or anonymise it sooner where it is no longer needed; and
  • security logs, support records, and unsuccessful partner applications are kept only for as long as reasonably needed for their purpose, taking account of security, complaint, fraud, and limitation periods.

Deletion from live systems may be followed by deletion from restricted backups during the ordinary backup-rotation period.

6. International Transfers

Some providers and production facilities process information outside the United Kingdom, including in the United States and other service regions. Where UK data-protection law treats this as a restricted transfer, we use an applicable adequacy regulation or contractual safeguard such as the UK International Data Transfer Agreement or UK Addendum, together with additional measures where required. You may contact us for information about the safeguard relevant to your data.

7. Your Rights

Depending on the law that applies, you may have rights to:

  • access and receive a copy of your personal information;
  • correct inaccurate or incomplete information;
  • request deletion or restriction of processing;
  • receive certain information in a portable format;
  • object to processing based on legitimate interests;
  • object at any time to direct marketing; and
  • withdraw consent without affecting earlier lawful processing.

These rights are not absolute. To exercise one, email [email protected]. We may need to verify your identity. We respond without undue delay and normally within one calendar month, subject to any lawful extension. Residents of US states with applicable privacy laws may also exercise any additional rights provided by those laws through the same address. We will not discriminate against you for exercising a privacy right.

8. Privacy Complaints

You may make a data-protection complaint by emailing [email protected] with the subject “Privacy complaint”, or by writing to our registered office. We will acknowledge the complaint within 30 days, investigate it without undue delay, keep you appropriately informed, and tell you the outcome.

You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. US residents may contact their state attorney general where applicable.

9. Cookies and Similar Storage

We use cookies, browser storage, and similar technologies needed for authentication, session continuity, basket functionality, checkout, fraud prevention, security, and user-requested features. Embedded payment and authentication services may set their own essential identifiers. We do not currently use advertising cookies or cross-site behavioural tracking. If we introduce non-essential tracking, we will provide the choices required by applicable law before it is used.

10. Security

We use technical and organisational safeguards appropriate to the nature of the information, including encrypted network connections, access controls, and restricted service credentials. No internet service can be guaranteed completely secure.

11. Young People and Automated Decisions

The Service is available to people aged 13 or over and is not directed to children under 13. If you are aged 13–17, you should use the Service only with permission from a parent or legal guardian. Where the law in your location requires parental consent to our processing of your personal information, your parent or legal guardian must provide that consent. A parent or legal guardian must place an order on behalf of anyone under 18 who is not legally able to enter the purchase contract themselves.

We do not knowingly collect personal information directly from a child under 13. If you believe a child under 13 has submitted personal information to us, contact us so we can investigate and delete it where appropriate.

We do not make solely automated decisions about individuals that produce legal or similarly significant effects. Automated systems may assist with fraud screening, security, content moderation, and artwork generation.

12. Changes to This Policy

We may update this policy to reflect changes to the Service or law. We will post the revised version with a new update date and give appropriate notice of material changes.