Mootsh Privacy Policy

Last Updated: May 11, 2026

Mootsh is operated by Mootsh Inc. (“Mootsh,” “we,” “us,” or “our”). We take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you access or use our website, products, and related services, collectively, the “Services.”

The Services are intended only for users located in the United States who provide a valid U.S. shipping address. We do not intentionally offer, market, or fulfill Services to individuals outside the United States.

Your use of the Services is also subject to our Terms of Use. Any capitalized terms not defined in this Privacy Policy have the meanings given to them in the Terms of Use.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated Privacy Policy on our website, by email, or by another appropriate method. Your continued use of the Services after an updated Privacy Policy is posted means that the updated Privacy Policy applies to your use of the Services going forward.

1. What This Privacy Policy Covers

This Privacy Policy describes how Mootsh treats personal data that we collect when you use our Services.

“Personal Data” means information that identifies, relates to, describes, or can reasonably be linked to a particular individual or household. Personal Data may also include information referred to as “personal information,” “personally identifiable information,” or “sensitive personal information” under applicable privacy laws.

This Privacy Policy does not apply to companies, websites, platforms, or services that we do not own or control.

2. Personal Data We Collect

We collect the following categories of Personal Data, depending on how you use the Services.

Category	Examples
Profile, Contact, and Shipping Data	Name, email address, phone number, billing address, shipping address, account identifiers, and related account information.
Account Data	Information used to create, access, and manage your Mootsh account through our website. We do not currently offer Google or Apple account login integrations.
Payment Data	Payment card type, last four digits of payment card, billing address, transaction information, payment status, email address, and phone number. Full payment card details are processed by Stripe, and Mootsh does not store full payment card numbers.
Commercial Data	Order history, purchase history, subscription or service history, customer preferences, and related transaction records.
Uploaded Content	Photos, videos, recordings, image files, or other content that you upload to the Services. Uploaded photos may include images of children or other individuals.
Photo Metadata	Uploaded photos may contain embedded metadata, such as file name, file size, device or camera information, date/time information, and, if enabled on the user’s device, location metadata such as GPS or geotag information. We do not intentionally use photo metadata for advertising, profiling, or targeted advertising.
Web, Device, and Analytics Data	IP address, browser type, device type, operating system, referring URLs, pages viewed, interactions with the Services, cookie identifiers, advertising identifiers, and similar online activity information.
Communications Data	Emails, SMS/text interactions, customer support messages, survey responses, and other communications with us.
Marketing and Advertising Data	Information about your interactions with our marketing emails, ads, website, cookies, pixels, and advertising or analytics tools.

We do not intentionally collect government identifiers, health information, biometric templates, or information for facial recognition. We do not use uploaded photos for facial recognition, biometric identification, AI enhancement, image tagging, image moderation, model training, or automated photo analysis.

3. Uploaded Photos and User Content

Mootsh allows users to upload photos for printing and related Services. Uploaded photos may include children, family members, friends, or other individuals.

You are responsible for the content you upload. You should not upload photos or other content unless you have the rights, permissions, or authority necessary to do so.

We use uploaded photos only as necessary to provide, fulfill, support, troubleshoot, secure, and operate the Services. We do not use uploaded photos for facial recognition, biometric identification, AI model training, automated image analysis, or targeted advertising.

We delete uploaded photos three months after the date they are uploaded to us, unless we are legally required to keep them longer or must retain limited information for security, fraud prevention, dispute resolution, or legal compliance. Backup copies, if any, may persist for a limited period until they are overwritten or deleted through ordinary backup processes.

4. How We Use Personal Data

Providing and Operating the Services

We use Personal Data to:

create and manage accounts;
process orders;
process payments through Stripe;
print and fulfill photo orders;
ship orders to valid U.S. shipping addresses;
provide customer support;
send service-related communications;
maintain and troubleshoot the Services;
prevent fraud, abuse, and security incidents; and
enforce our Terms of Use and other policies.

Improving and Personalizing the Services

We use Personal Data to:

understand how users interact with the Services;
improve website functionality and user experience;
debug and fix technical issues;
analyze product performance; and
develop and improve our offerings.

Marketing and Advertising

We may use Personal Data to:

send promotional emails, where permitted by law;
send SMS/text messages if you separately opt in;
measure the performance of our marketing campaigns;
understand how users arrive at and use our website;
measure ad conversions and attribution; and
show or measure ads through tools such as Google Analytics, Meta Pixel, and Google Ads conversion tracking.

We do not sell Personal Data for money. However, our use of certain analytics, advertising, cookies, pixels, or conversion-tracking tools may be considered a “sale,” “sharing,” “targeted advertising,” or similar activity under certain privacy laws. Where required by law, you may have the right to opt out of those activities.

We do not share uploaded photos with advertising partners for targeted advertising.

Communications

We use Personal Data to:

respond to questions and requests;
send order confirmations and account notices;
provide customer support;
send legal, policy, and security notices;
send marketing emails where permitted; and
send SMS/text messages if you have opted in.

Marketing emails include an unsubscribe mechanism. We will honor marketing email opt-out requests as required by law.

Legal, Safety, and Compliance Purposes

We may use Personal Data to:

comply with applicable laws and legal obligations;
respond to lawful requests from courts, law enforcement, or government authorities;
protect the rights, property, and safety of Mootsh, users, vendors, and others;
investigate suspected fraud, abuse, or security incidents;
enforce agreements; and
support business transfers, such as a merger, acquisition, financing, reorganization, or sale of assets.

5. Sources of Personal Data

You

We collect information that you provide directly, such as when you create an account, place an order, upload photos, contact customer support, opt in to SMS/text messaging, or sign up for marketing communications.

Your Device and Browser

We automatically collect certain web, device, cookie, analytics, and usage information when you use the Services.

Vendors and Partners

We may receive information from vendors and partners that help us operate Mootsh, such as payment processors, hosting providers, analytics providers, advertising platforms, email providers, SMS providers, customer support tools, printing partners, and delivery partners.

For example, these vendors may provide information about whether a payment was successful, whether an email was opened, whether a text message was delivered, or how users interact with our website.

6. How We Disclose Personal Data

We disclose Personal Data to vendors, partners, and other recipients as described below.

Recipient Category	Categories of Personal Data Disclosed	Purpose
Hosting and Infrastructure Providers	Account data, uploaded content, web/device data, communications data, and related operational data.	Hosting, storage, security, backups, and operation of the Services.
Payment Processor: Stripe	Payment data, transaction data, billing information, email address, phone number, and related order details.	Payment processing, fraud prevention, refunds, and payment support.
Photo Printing and Fulfillment Partners	Uploaded photos, shipping data, order details, and related fulfillment information.	Printing, packaging, and fulfilling customer orders.
Delivery and Shipping Partners	Name, shipping address, phone number or email where needed, and order shipment information.	Shipping, delivery, tracking, and delivery support.
Email Providers	Name, email address, account/order information, marketing preferences, and email engagement data.	Service emails, transactional emails, marketing emails, and email performance measurement.
SMS/Text Messaging Provider: Twilio	Phone number, SMS opt-in status, message content, delivery status, and related messaging data.	Sending and supporting SMS/text messages you opted in to receive.
Customer Support Tools	Contact information, account/order information, uploaded content if needed for support, and communications data.	Responding to support requests and resolving customer issues.
Analytics Providers	Web, device, cookie, analytics, and usage data.	Understanding use of the Services, improving functionality, and measuring performance.
Advertising and Measurement Partners	Web, device, cookie, advertising identifier, conversion, and website interaction data.	Measuring marketing campaigns, ad attribution, and, where enabled, advertising or retargeting.
Professional Advisors	Relevant Personal Data as needed.	Legal, accounting, compliance, audit, insurance, and business advice.
Government Authorities or Legal Recipients	Relevant Personal Data as required.	Compliance with law, legal process, enforcement of rights, safety, and fraud prevention.
Business Transfer Recipients	Relevant Personal Data.	Merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

We may also disclose aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you.

7. Cookies, Analytics, Advertising, and Opt-Out Choices

We use cookies, pixels, tags, SDKs, local storage, and similar technologies to operate, improve, analyze, and market the Services.

These technologies may include:

Essential Cookies, which are necessary for the Services to function;
Functional Cookies, which remember preferences and settings;
Performance and Analytics Cookies, which help us understand how the Services are used; and
Advertising and Measurement Cookies or Pixels, which help us measure ad performance, conversions, attribution, and campaign effectiveness.

We use tools that may include Google Analytics, Meta Pixel, and Google Ads conversion tracking.

These tools may collect information such as your IP address, device information, browser information, pages viewed, actions taken on the website, cookie identifiers, advertising identifiers, and conversion events. We use these tools to understand website performance, improve the Services, measure advertising, and market Mootsh.

We do not intentionally send uploaded photos to advertising partners. We also do not intentionally include full payment card numbers, government identifiers, or health information in advertising or analytics tools.

You can manage cookies through your browser settings. You may also be able to adjust ad preferences through Google, Meta, or other advertising platforms. Some browser settings may limit functionality of the Services.

Where required by applicable law, you may have the right to opt out of certain targeted advertising, sale, sharing, or similar processing.

8. SMS / Text Messaging

If you provide your phone number and separately opt in to receive SMS or text messages from Mootsh, we may use your phone number to send messages you opted in to receive.

Messages may include monthly photo upload reminders, account alerts, service notifications, and related updates. For monthly photo upload reminders, message frequency is generally no more than once per month when you have not uploaded photos for that month, although frequency may vary for account, service, or support-related messages.

SMS opt-in is collected through a separate checkbox or other separate opt-in mechanism. SMS opt-in is not required as a condition of purchase.

You can opt out of SMS/text messages at any time by replying STOP. You can reply HELP for assistance. Message and data rates may apply.

Phone numbers, mobile information, text messaging opt-in data, and text messaging consent will not be sold or shared with third parties or affiliates for their marketing or promotional purposes.

We may disclose phone numbers, SMS opt-in data, and related messaging information to Twilio and other vendors that help us deliver, support, secure, or operate our messaging program.

9. Data Security

We use reasonable technical and organizational measures designed to protect Personal Data from unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

Stripe processes payment information securely. Mootsh does not store full payment card numbers.

10. Data Retention

We retain Personal Data for as long as reasonably necessary to provide the Services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and protect the rights and safety of Mootsh and others.

Our retention practices include:

Category	Retention Practice
Uploaded Photos	Deleted three months after the date they are uploaded to us, unless a longer period is legally required or necessary for security, fraud prevention, dispute resolution, or legal compliance.
Account Data	Retained while your account is active and for a reasonable period afterward as needed for account administration, legal compliance, fraud prevention, dispute resolution, or business records.
Order and Commercial Records	Retained as needed for order history, customer support, accounting, tax, legal, fraud prevention, and business record purposes.
Payment Metadata	Retained as needed for payment processing, refunds, chargebacks, accounting, fraud prevention, and legal compliance. Full payment card details are processed by Stripe.
Support Communications	Retained as needed to provide support, maintain business records, resolve disputes, improve the Services, and comply with legal obligations.
SMS Consent and Messaging Records	Retained as needed to document consent, manage opt-outs, provide messaging support, comply with messaging requirements, and resolve disputes.
Analytics and Advertising Data	Retained according to our settings with analytics and advertising providers and as needed for business analysis, marketing measurement, security, and compliance.
Backup Copies	May persist for a limited period until overwritten or deleted through ordinary backup processes.

When Personal Data is no longer needed, we will delete, de-identify, aggregate, or otherwise handle it according to applicable law and our ordinary business practices.

11. Children’s Privacy

The Services are intended for adults 18 and older. We do not knowingly allow children to create accounts or submit Personal Data directly to us.

Users may upload photos that include children or other minors only if they are the parent, guardian, or otherwise have the right or authority to upload those photos.

We do not knowingly collect Personal Data directly from children under 13. If you believe that a child has submitted Personal Data to us directly, please contact us at [email protected], and we will take appropriate steps to delete the information.

We do not use uploaded photos of children for facial recognition, biometric identification, AI model training, automated image analysis, or targeted advertising.

12. Your Privacy Rights and Choices

Depending on where you live and the laws that apply to us, you may have certain privacy rights regarding your Personal Data.

These rights may include the right to:

request access to Personal Data we maintain about you;
request correction of inaccurate Personal Data;
request deletion of Personal Data;
request a copy of certain Personal Data;
opt out of certain targeted advertising, sale, sharing, or profiling activities;
withdraw consent where processing is based on consent;
appeal a denied privacy request, where required by law; and
not be discriminated against for exercising privacy rights.

To exercise privacy rights, contact us at [email protected].

We may need to verify your identity before responding to certain requests. We may ask for information reasonably necessary to verify your identity, locate your account, process your request, and protect against fraudulent or unauthorized requests.

We may deny or limit a request where permitted by law, such as where retaining information is necessary to complete a transaction, provide the Services, detect security incidents, prevent fraud, comply with legal obligations, resolve disputes, or protect legal rights.

13. California, Nevada, and Other U.S. State Privacy Rights

Some U.S. state privacy laws provide residents with specific rights regarding Personal Data.

Mootsh does not sell Personal Data for money. However, as described above, our use of cookies, pixels, analytics, advertising, and conversion-tracking tools may be considered a “sale,” “sharing,” “targeted advertising,” or similar activity under certain laws.

Where required by applicable law, residents of California, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or other states may have rights to access, correct, delete, obtain a copy of, or opt out of certain uses of their Personal Data.

California residents may also have the right to request information about categories of Personal Data collected, sources, purposes, categories disclosed, categories sold or shared, and categories of third parties to whom Personal Data is disclosed, sold, or shared, where applicable.

Where required by law, you may designate an authorized agent to submit a privacy request on your behalf. We may require proof of authorization and may also require you to verify your identity directly with us.

To exercise state privacy rights, contact us at [email protected].

14. Marketing Choices

You can opt out of marketing emails by using the unsubscribe link included in those emails or by contacting us at [email protected].

You can opt out of SMS/text messages by replying STOP to any Mootsh text message.

Even if you opt out of marketing communications, we may still send non-marketing messages, such as order confirmations, account notices, security notices, customer support responses, and legal or policy notices.

15. Non-U.S. Users

If you access the Services from outside the United States, you understand that your information may be processed in the United States, where privacy laws may differ from those in your jurisdiction.