Privacy notice

1. Who we are

pretendmind, the business that runs pretendmind.com, based in Dhaka, Bangladesh. We decide how the information in this notice is used, so under data protection law we are the controller.

Our full postal address is available on request: email learningbangladesh71@gmail.com.

2. How to reach us

For anything about your information, including the requests described below, email learningbangladesh71@gmail.com. It helps to put your request code (it looks like CM-XXXXXX) in the subject and to write from the email address you used for the order, so we know the request is yours.

3. What we collect

• Your name and email address, and your mobile number if you give one. Outside Bangladesh the number is optional.
• The photographs you upload.
• What you tell us about the order: the name or names to use, an age if you give one, the occasion, the style you pick, and any notes or wishes.
• If you pay: the amount, how you paid and the reference we are given (for example a bKash transaction ID). We never receive full card numbers.
• Technical details from your browser when you place a request: a scrambled (hashed) form of your IP address, which we use to limit abuse; and, where advertising measurement is allowed (see the cookies section), your IP address and browser details. Plus the cookies described below.
• Any messages you send us.

4. Why we use it, and on what legal basis

• To make and deliver what you asked for: making the free preview and the rest, sending you the link and updates by email (and by text, for Bangladeshi mobile numbers), taking payment and delivering the files. Legal basis: performing our contract with you, or taking the steps you asked for before one.
• To send you one reminder if your free preview has been waiting for a day or more without being opened or paid for. We send it once, never again. Legal basis: our legitimate interest in making sure the link you asked for actually reached you.
• To prevent abuse and fraud, for example limiting how many free previews one person or one connection can ask for in a day. Legal basis: our legitimate interest in keeping the service usable and not being misused.
• To measure our advertising, with Meta (Facebook) and Google tools. Legal basis: your consent where the law requires it (the European Union, the EEA, the UK and Switzerland), otherwise our legitimate interest in knowing which adverts work. See the cookies section.
• To keep records of payments that the law requires us to keep. Legal basis: legal obligation.

We do not sell your information. We do not make decisions about you by automated means that have legal or similarly significant effects.

5. Your photographs

• We use your photo only to make your order. It is never published, and never shown as a sample or used in advertising unless you give us separate written permission.
• It is kept in private storage that is not publicly readable. The files are reached only through links that expire.
• Our stored copy is deleted automatically 30 days after you send your request. Our system checks for photos that are due several times a day.
• While your order is being made, a working copy of the photo is kept on the computer we make it on. That copy is not yet deleted automatically. If you ask, we delete it along with everything else (see below).
• The finished artwork (the drawn pages, stickers or portrait) is kept so that your download link keeps working. It is not deleted automatically; ask and we delete it.
• We do not use face recognition, and we do not build face templates or anything else that could identify a person from their photo.

6. How the artwork is made

The artwork is made with AI tools and checked by a person before it reaches you. To make it, your photo and the details of your order are passed to two AI services: OpenAI's ChatGPT, which draws the images, and Anthropic's Claude, which we use to write the story text and to check each image. Each service handles what it receives under its own terms.

We do not use your photos, or anything made from them, to train AI models.

7. Photos of children

Many orders are for a child. A child's photo must be sent by a parent or guardian, or with their permission. We use it only to make the order, and we never use a child's photo or artwork as a sample or in advertising. The studio is meant for adults to use; children should not send us their own photos or details.

8. Photos of other people, and of people who have died

If your photo shows someone else, you must have the right to share it and, for a living adult, their agreement. Anyone who appears in a photo sent to us can ask us to delete it by emailing learningbangladesh71@gmail.com.

For a memorial portrait, data protection law does not generally cover people who have died, but we treat these photos with the same care and delete them on the same schedule. Living relatives who appear in the same photo are covered in the normal way.

9. The client marketplace

If you hire through the marketplace — posting a brief on our hire page, receiving quotes and ordering the work — we also process the following, on the same legal bases as above: performing our contract with you (or taking the steps you asked for before one), our legitimate interest in running a safe marketplace, and legal obligation for payment records.

• Your account: name, email address, a password or a Google, Facebook or LinkedIn sign-in, and your language preference, which we store so that pages and emails reach you in your language. If you post a brief without an account, we verify your email address with a code and create the account at that point.
• Your project brief: the title, description, category, budget, deadline and any attachment or reference link. Approved freelancers can read it so they can quote; it is not published on the open web.
• Quotes are double-blind: freelancers appear to you by a number, not a name, and they are not shown your contact details. The freelancer's identity is shown to you only after you accept a quote and the payment is confirmed.
• Messages and files in the order room. They stay on the platform, and our team can read them when moderating or resolving a dispute — that record is what a dispute decision is based on.
• AI translation: when a brief, quote or message is written in a language you do not read, we may show a machine translation under the original. To make it, the text is sent to the AI provider we have configured — one of Anthropic, OpenAI or OpenRouter — which handles it under its own terms. Every translation is labelled as an AI translation, and the original wording stays authoritative. Translations of briefs and quotes are stored with them; chat translations are not stored.
• Invoice details: your name, email address and, where we can detect it, your country, which decides only which VAT sentence is printed on the invoice, never an amount. Invoices and payment records are kept as long as the law requires us to keep accounts.

Nothing in this section changes what we say elsewhere on this page about the studio, your rights or your photographs.

10. Who we share it with

Only the services we need to run the studio, and only what each one needs:

• Vercel — hosts the website. Our server functions run in Sydney, Australia.
• Supabase — our database and private file storage, in Sydney, Australia.
• OpenAI (ChatGPT) and Anthropic (Claude), in the United States — making the artwork, as described above.
• Our email host, whose mail server sends our emails to you.
• BulkSMSBD, in Bangladesh — sends our text messages, to Bangladeshi mobile numbers only.
• bKash and SSLCommerz, in Bangladesh — only if you pay through them.
• Meta (Facebook, Messenger, WhatsApp) — if you choose to message us there, Meta handles that conversation under its own terms.
• Meta and Google — advertising measurement and analytics, as set out in the cookies section.
• Authorities, if the law requires us to.

11. Where your information goes

We are in Bangladesh, our servers are in Australia, and some of the services above are in the United States. Neither Bangladesh nor Australia has an adequacy decision from the European Commission or the UK. Where a provider's data processing terms include the European Commission's standard contractual clauses (and the UK addendum to them), those clauses cover the transfer. You can ask us which safeguard applies to a particular provider.

12. How long we keep it

• Uploaded photos: our stored copy is deleted automatically 30 days after your request. Working copies: until you ask, as explained above.
• Finished artwork: kept so your link keeps working, until you ask us to delete it.
• Your request details (name, contact details, order details, IP address): kept as the record of your order until you ask us to delete them.
• Payment records: for as long as the law requires us to keep accounts, even if you ask us to delete everything else.
• The advertising click identifier we store in the pm_fbc cookie: 90 days.

13. Your rights

If you are in the European Union, the EEA or the UK, data protection law gives you these rights, and we offer the same to everyone who uses the studio:

• to get a copy of the information we hold about you;
• to have it corrected if it is wrong;
• to have it deleted;
• to have its use restricted while a question about it is settled;
• to object to our using it on the basis of legitimate interests;
• to receive the information you gave us in a portable format;
• to withdraw consent at any time, without affecting what was done before you withdrew it.

Email learningbangladesh71@gmail.com. We reply within one month.

You can also complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU or EEA, the authority in the country where you live (listed at edpb.europa.eu).

14. Asking us to delete everything early

You do not have to wait for the automatic deletion. Email learningbangladesh71@gmail.com from the address you used, with your request code, and ask us to delete your order. We delete the photos, the working copies and the finished artwork, and write back to tell you it is done. If you paid, we keep the payment record, because the law requires it.

15. Cookies

Some cookies are needed for the site to work, for example to keep you signed in. These are always on.

Advertising and analytics tools (the Meta Pixel and Google Analytics) set their own cookies. When you send a request, we also send Meta a scrambled (hashed) copy of your name, email and phone number with your IP address and browser details, and tell Google Analytics that a request was made, so that we can see whether an advert led to it.

If you are in the European Union, the EEA, the UK or Switzerland — or if we cannot tell where you are — none of this happens unless you choose Accept in our cookie banner. You can change your answer at any time with the Cookie settings link at the bottom of this page.

When a studio order is paid, we tell Meta and Google that a purchase happened, with a scrambled (hashed) copy of the buyer's name, email and phone number — but only if the request was made where no consent is needed, or after you chose Accept. If you are in the EU, EEA, UK or Switzerland and did not accept, nothing about the purchase is sent to them.

The cookies we set ourselves: pm_geo (the country we detected, kept 1 day, to know whether to ask you about cookies), pm_consent (your answer, kept 180 days), pm_fbc (the advertising click identifier, kept 90 days, and only set where advertising measurement is allowed), pm_utm, pm_ref and pm_aff (which campaign, referral or affiliate link brought you here, kept 30 days), and pm_aid and pm_sid (random visitor and visit identifiers for our own page statistics, which stay with us, kept up to 400 days and 30 minutes).

16. Changes to this notice

If we change this notice, we update the date at the top of the page.