byLark

Privacy Policy

Last updated: February 10, 2026

Who We Are

ByLark is operated by Sentium Inc., a Delaware corporation ("we", "us", "our"). We provide a photo-to-art service at bylark.art.

Information We Collect

Photos you upload: You may upload photos to generate artwork. You can preview generated artwork for free before deciding to purchase. We do not perform facial recognition, personal identification, or biometric analysis of any kind. No biometric data is extracted or stored.

Email address: We collect your email address when you make a purchase, solely to send you order confirmation and delivery of your artwork.

Payment information: Payments are processed by Shopify Payments. We never see or store your credit card number or banking details.

Anonymous session data: We use anonymous authentication to manage your session while using the service. No personal account or profile is created.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract performance (GDPR Article 6(1)(b)): We process your photos, email, and payment data to provide the service you requested and fulfill your order.
  • Legitimate interest (GDPR Article 6(1)(f)): Service security and fraud prevention.

How We Use Your Information

  • To generate artwork from your uploaded photos
  • To process your payment and deliver your purchase
  • To send order confirmations and download links via email

We do not sell, share, or use your data for advertising. We do not use your photos to train AI models. Our processing providers do not receive your personal data or photos for their own purposes beyond generating your artwork.

Data Storage & Retention

  • Uploaded photos: Retained only as long as necessary and typically deleted within 30 days. You may request deletion at any time.
  • Generated artwork: Watermarked previews and purchased artwork are typically available for approximately 90 days, then deleted.
  • Order and payment records: Retained for up to 7 years for tax and legal compliance.
  • Email address: Retained with your order records. You may request deletion at any time and we will process your request without undue delay.
  • Session data: Automatically expires and is not retained long-term.

International Data Transfers

Your data is processed in the United States and may also be processed in other locations where our service providers operate infrastructure. For users in the European Economic Area (EEA), these transfers are conducted in compliance with applicable data protection laws.

Third-Party Services

We use the following service providers to operate ByLark:

  • Shopify -- payment processing and commerce infrastructure.
  • Cloudflare -- website hosting and file storage.
  • Supabase -- anonymous authentication and database.
  • Image generation partners -- artwork creation infrastructure.

We do not share your personal data with any parties beyond those necessary to operate the service.

Cookies

We use minimal cookies necessary for session management and authentication. We do not use tracking or advertising cookies.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data.
  • Portability: Receive your data in a machine-readable format.
  • Objection: Object to or restrict processing of your data.

To exercise any of these rights, email us at contact@sentium.one. We will respond within 30 days.

California residents: Under the CCPA, you have the right to know what personal information we collect, request its deletion, and opt out of data sales. We do not sell personal data.

Children's Privacy

ByLark is not intended for users under 13 years of age (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has used the service, please contact us for deletion.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page. Continued use of the service after changes constitutes acceptance.

Contact

For privacy inquiries or to exercise your rights, reach us at contact@sentium.one