Lina & Lot is a brand of Convince B.V. Our studio is at Generaal Vetterstraat 57, 1053 BT Amsterdam, the Netherlands. Registered address: Krugerplein 4-1, 1091 KX Amsterdam. Chamber of Commerce 80932983 · VAT NL861856727B01. Convince B.V. is the data controller for all personal data processed via linalot.com.

• The photo you upload to have a portrait made.
• The message you write on the inside of the card.
• The name and address of the card’s recipient.
• Your email address for the order confirmation and any questions about the order.
• Payment data — we do not handle this ourselves; it goes directly to Mollie.

We temporarily store your IP address to prevent abuse and to enforce the free-tier limits (up to 6 generations per IP per day). When you order and pay for a card, we link your IP to your order for 24 hours so you get a higher limit (20 generations per day) — that way you can quickly make a second card without hitting the free-tier wall.

Legal basis: legitimate interest (Article 6(1)(f) GDPR) — fraud prevention and rate-limit enforcement.

Retention: rate-limit records are automatically deleted after seven days; IPs linked to an order are unlinked after 30 days (the order itself remains for seven years without the IP).

Want your rate-limit record erased sooner? Email contact@convinceagency.com.

Your photo is resized on your device to a maximum of 1024 pixels and then forwarded once to an AI image-generation provider. Based on your photo this AI model creates a portrait in the style you chose.

We do not store your original photo. Only the AI-generated portrait is kept, because it has to be printed on the card.

Your photo is not used to train AI models. Our AI provider has a data-processing agreement with us in which it is recorded that input (including images) and generated output are not used to improve their products. The AI provider retains the data for a limited period, solely to detect abuse, ensure security, and comply with legal obligations. After that it is deleted.

Our AI provider is based in the United States. Transfer of personal data takes place under the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission.

We engage a small number of carefully selected processors:

• An AI image-generation provider — processes your photo to create the portrait. See conditions above.
• A database and file-storage provider — stores the generated portrait and order data on EU-based servers.
• A printing partner — receives the generated portrait, your message and the delivery address to physically print and mail the card.
• A payment provider — handles the payment (iDEAL, credit card, Bancontact).
• A postal carrier — delivers the card to the address you provided.

We do not sell your data to third parties and do not use it for advertising. On request we can share the specific parties we engage; please email the contact address below.

• Original photo: not stored. Only kept temporarily in memory while the portrait is being created.
• Generated portrait and message: as long as needed to print and deliver the card.
• Order data (name, address, email, payment status): seven years, due to statutory tax-retention obligations.

You have the right to access, correct, or delete your data. You can also object to processing or request data portability. Send an email to contact@convinceagency.com. We respond within four weeks.

Not happy with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.

We may update this statement from time to time, for example if the law or our service changes. The most recent version is always on this page.