Privacy policy
This privacy policy explains the photos and the checkout email used to make one Christmas card. Payment is a single $9.00 charge. We do not set analytics cookies. The photos you upload are deleted once the portrait is saved. Finished files remain for 30 days after payment. Ask us by email for access or deletion. Refunds are within 14 days.
Who is responsible
AI Christmas Photo Generator (aichristmasphotogenerator.com) decides why the photos and the order record are processed. Write to support@aichristmasphotogenerator.com. The person who pays must be at least 18. A child may appear in a photo only if the adult who uploads it is the parent or guardian or has that parent's permission.
What we collect
Photos you upload, the scene, size, and optional greeting, recipient, and signature, and the email address you enter at checkout. We store order status and the amount. We do not receive or store your card number. Waffo processes the payment.
We do not ask you to create an account. The upload form does not ask for an email. We do not sell personal data and we do not use your photos to advertise.
How photos are used
Photos are stored in Cloudflare R2 so the image model can read them after you pay. They are sent to fal.ai only after payment, only to generate the portrait you ordered, using ByteDance Seedream 4.5 Edit. We do not publish customer photos in the gallery. The gallery is our own sample drawings.
Uploaded photos are deleted as soon as the portrait is saved. Finished downloads stay for 30 days after payment, then they are deleted. Unpaid drafts are deleted within 24 hours. Order records (email, status, amount) are kept for 24 months for refunds, disputes, and accounting, then deleted.
Cookies and analytics
This site does not set analytics cookies, advertising cookies, or any other cookie. We do not run a third-party analytics script. Cloudflare, which hosts the site, processes connection logs to run and protect it. We do not use those logs to advertise.
The Waffo checkout page is on Waffo’s domain. That page may set its own cookies. Read the privacy policy Waffo publishes on waffo.ai. We do not control those cookies.
Your data rights
Email support@aichristmasphotogenerator.com from the address you used at checkout. Say which right you are using and include the order id. We reply within 30 days. We may ask you to confirm that the email matches the order before we send a copy or delete a record. You can also use the report form if the issue is about the content of an image.
Access: you can ask for a copy of the order record, which is the email, status, amount, scene, size, and dates. While the downloads still exist, you can also ask for the finished PNG and, on print sizes, the PDF.
Correction: you can ask us to correct the checkout email or another fact in the order record that is wrong. We cannot redraw a face by calling it a correction. A missed likeness is a refund question under the refund policy, not an edit of stored personal data.
Deletion: you can ask us to delete the downloads and the personal data in the order. Uploaded photos are already deleted when the portrait is saved. We may keep a payment record when tax, accounting, or an open dispute requires it, and we tell you if we do.
Portability: the copy we send is plain text for the order record and, while the files still exist, the PNG and PDF themselves, so you can keep them outside this site.
Objection: you can object to our processing. We do not use the photos for advertising, and we do not train a model on them. If you object before the portrait is made, we will not send the photos to the image model, and you can ask for a refund under the refund policy. If you object after the files exist, we stop using them except for a payment record the law tells us to keep.
Complaint: if you are in the EEA, the UK, or another region with a data-protection law, you can complain to your local data-protection authority.
Processors and international transfers
Three companies process data for an order, and each may handle it outside the country where you live. We do not claim a transfer tool of our own beyond what those companies publish.
Cloudflare hosts the site, the D1 database, and the R2 photo storage. Cloudflare’s privacy policy, which lists Cloudflare, Inc. at 101 Townsend St, San Francisco, CA 94107, USA, says Cloudflare is a U.S. company, stores information primarily in the United States and the European Economic Area, and may transfer it to other countries where the Cloudflare group operates. Policy: https://www.cloudflare.com/privacypolicy/
fal.ai runs the image model after you pay, and only to make the portrait you ordered, using ByteDance Seedream 4.5 Edit. fal’s privacy policy, last updated 22 July 2026, says fal (Features & Labels Inc.) is based in the United States and processes and stores personal information on servers in the United States and other countries. Your photos are that input. Policy: https://fal.ai/privacy
Waffo is the merchant of record. Checkout runs on Waffo’s domain, and that page may set its own cookies. Waffo’s privacy policy, effective 24 February 2026, says Waffo transfers, stores, and processes personal information in countries other than your country of residence, including the United States. The policy’s entity list includes Waffo.com Limited, RM 1903, 19/F Lee Garden One, 33 Hysan Avenue, Causeway Bay, Hong Kong, and says the controller that applies can depend on where you are. We do not receive your card number. Policy: https://www.waffo.ai/privacy
Common questions
Do you use analytics cookies?
No. This site sets no cookies and loads no analytics script.
How do I delete my photos?
Email support@aichristmasphotogenerator.com. Uploaded photos are deleted when the portrait is saved. Downloads are deleted after 30 days. Order records are deleted after 24 months.