Privacy Policy

1) Who we are

SoulPal is operated by Chengdu SoulPal Intelligence Technology Co., Ltd., a company established in Chengdu, China. The company operates the SoulPal brand and soulpal.co.

The Site currently may include product information, account features, a waitlist, contact forms, and a free Pixel Pal experience that turns an uploaded pet photo into a pixel character. The smart collar and broader cozy pet game connected to your real pet are still in development.

For questions about this Privacy Policy or a privacy request, contact support@soulpal.co.

2) Information you may provide

Depending on the feature you deliberately use, you may provide:

• Account and contact information, such as an email address, display name, and information returned by a sign-in provider.
• Waitlist and communication choices, including the channel through which you ask to receive updates.
• Message content, such as questions, privacy requests, partnership inquiries, or feedback.
• Pet photos and related content uploaded for the Pixel Pal experience.
• Generated and selected Pixel Pal information, including names and choices associated with the experience.

Account, email, Waitlist, contact-message, Discord, pet-photo, generated-content and related ownership records may be stored on SoulPal’s systems. The browser may also store authentication state, flow-recovery information, pet-photo drafts and generated candidates as described in Section 6.

3) Information collected automatically

SoulPal may collect:

• IP addresses used for request logging, generation eligibility, rate limiting, abuse prevention and security auditing;
• request information such as timestamps, paths, user-agent information, trace identifiers and, when available, user identifiers;
• referral, referrer, UTM and advertising-click attribution values submitted when a user starts or completes a Waitlist flow;
• authentication, delivery and security records associated with account or communication activity; and
• first-party browser values used to restore sign-in, generation, sharing, navigation and Waitlist flows.

SoulPal does not currently use third-party browser analytics, advertising pixels, session replay, third-party client-side error/performance monitoring, device fingerprinting or geolocation collection. Normal web requests may still reveal network and browser information to SoulPal and the service provider handling the request.

4) Information from and disclosed to third parties

Depending on the feature a user chooses, SoulPal currently interacts with:

• Google and Discord for sign-in and identity information;
• AI service providers, including OpenAI, to generate and review Pixel Pal images from uploaded pet photos;
• hosting and infrastructure providers that store or process account, communication, photo, generated-content, log and security information; and
• email and communication providers used to deliver authentication and requested update messages.

SoulPal does not currently use an active browser-side analytics or advertising provider. Other AI service providers may also be involved in Pixel Pal generation or review.

5) How we use information

Depending on the feature chosen by the user, personal information may be used to:

• provide, secure, maintain and troubleshoot the Site and requested features;
• create, deliver, save or recover a Pixel Pal when the user requests that experience;
• manage an account and authentication;
• record a deliberate Waitlist or update-channel choice and send the requested communications;
• respond to inquiries and privacy requests;
• maintain first-party referral and campaign-attribution records associated with a deliberate Waitlist action;
• prevent fraud, abuse and unauthorized access; and
• comply with legal obligations and enforce applicable terms.

Creating an account, generating a Pixel Pal, uploading a pet photo, or merely viewing a page does not by itself create marketing consent. Pet photos must not be used in public marketing, community content, model training, or unrelated product improvement unless that use is separately verified, disclosed, and authorized where required.

6) Cookies and similar technologies

SoulPal currently uses first-party browser storage rather than an active third-party analytics or advertising pixel. Depending on the feature used, local storage, session storage or IndexedDB may contain:

• an application login token and basic account details;
• OAuth return paths and temporary flow-recovery information;
• generation identifiers, pet names, pet-photo drafts and generated Pixel Pal candidates;
• Waitlist join, channel, referral and campaign-attribution information; and
• navigation or scroll-restoration information.

Some values are removed when a flow completes, but others have no automatic browser-side expiry. Signing out clears the main login state but does not currently remove every local photo, generated candidate or flow record. Users can remove browser-local copies by clearing SoulPal’s site data in their browser. Authentication providers may use their own cookies or storage under their own policies when a user chooses those services.

SoulPal does not currently use third-party browser analytics, advertising pixels, session replay or third-party client-side error/performance monitoring. SoulPal therefore does not currently provide a cookie-preference panel, advertising opt-out, “Do Not Sell or Share” link, or a site-specific Global Privacy Control or Do Not Track response. Before enabling materially different browser tracking or advertising measurement, SoulPal will update this Policy and provide any choices required by applicable law.

7) How we share information

SoulPal may disclose personal information only for the purposes described in this Privacy Policy and as permitted by applicable law.

A. Service providers

Service providers may process information on SoulPal’s behalf for hosting, authentication, AI image generation and review, storage, email delivery, security and support. Uploaded pet photos may be sent to AI service providers, including OpenAI, for generation and review. SoulPal does not currently use an active third-party browser analytics or advertising service.

B. Legal and safety

We may disclose information where reasonably necessary to comply with applicable law or legal process, protect the rights and safety of SoulPal or others, and investigate fraud, abuse, or security incidents.

C. Business transfers

If SoulPal later establishes or transfers operations to a Hong Kong, U.S., or other entity, registration alone does not automatically transfer this Privacy Policy or users’ information. Any transfer must follow applicable law, contractual requirements, and required user notice or consent.

D. At the user’s direction

We may disclose information when a user deliberately asks us to do so or provides valid consent. If a user activates a sharing feature, a Pixel Pal image, pet name, public link or current page link may be passed to the app, service or recipient selected by that user. SoulPal cannot control copies retained by the selected recipient.

8) Data retention and deletion

Most account, Waitlist, contact, Discord, pet-photo, generated-content, attribution, audit and security records do not currently have a fixed automatic expiry or cleanup schedule. Uploaded pet photos and generated Pixel Pal files may remain stored until SoulPal removes them. Marketing unsubscribe changes the sending status but does not itself delete the email address or related preference and suppression records.

Pet-photo drafts, generated candidates and flow-recovery records may also remain in the user’s browser. Signing out does not currently remove every browser-local copy. Users can remove those copies by clearing SoulPal’s site data in their browser. Automatic browser-local account isolation and cleanup are not currently available.

Some short-lived authentication and operational records expire automatically, and application file logs are configured for limited rotation. Other container logs, manual backups, security records and third-party copies may remain for longer or for an undetermined period. SoulPal does not currently guarantee that a request will automatically remove information from every log, backup or third-party processor.

There is currently no self-service account, pet-photo or generated-content deletion tool. Users may contact support@soulpal.co with a deletion request; SoulPal may verify the requester and will assess what can be removed from active systems, subject to operational, security and legal limitations. No specific deletion completion timeframe is promised.

9) Security

We use reasonable administrative, technical and organizational measures appropriate to the information and current Site. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

We review these measures as the Site and its features evolve.

10) Choices and privacy rights

A. Marketing communications

Users can use available Waitlist controls to stop future email or Discord updates, use an unsubscribe method provided in an email, or contact support@soulpal.co. Stopping updates does not delete the account, email address, historical preference records, Pixel Pal content or browser-local copies, and a message already in progress may still be delivered. Transactional or security messages needed to provide a requested service may continue.

B. Access, correction and deletion

Depending on applicable law, users may have rights to request access to, correction of, or deletion of personal information. Requests may be submitted to support@soulpal.co, and SoulPal may need to verify the requester’s identity.

SoulPal does not currently provide an automated data-export, account-deletion, pet-photo-deletion or generated-content-deletion tool. Requests are handled manually to the extent operationally available and required by applicable law. Some information may remain in logs, security records, backups or third-party systems, and the current system does not automatically propagate deletion to every service provider.

11) U.S. visitors and state privacy disclosures

Privacy rights and obligations may vary by state and may apply only when a business meets the relevant legal threshold. Where an applicable U.S. state privacy law gives a user additional rights, SoulPal will respond as required by that law.

SoulPal does not sell personal information for money. SoulPal does not currently use a third-party browser advertising pixel or server-side advertising event API. SoulPal does maintain first-party referral and campaign-attribution information associated with deliberate Waitlist actions. No “Do Not Sell or Share” or advertising opt-out control is currently implemented. Before enabling advertising or cross-site tracking, SoulPal will update this Policy and provide any controls required by applicable law.

12) International processing and cross-border transfer

SoulPal is operated from Chengdu, China. Browser-local copies remain on the device and browser where they are created unless the user or browser removes them. Information sent to SoulPal—including account, communication, pet-photo, generated-content, log and security information—is primarily stored on infrastructure in the United States and may be accessed by authorized team members in China. Uploaded pet photos may also be processed by AI service providers in the United States, Hong Kong, or other regions where those providers operate. Authentication and email providers may process information in additional regions under their own service arrangements.

Where applicable law requires an additional transfer mechanism, notice, assessment, contract or separate consent, SoulPal will address that requirement for the relevant processing. Ordinary use of the Site is not treated as blanket consent to every international transfer.

13) Children’s privacy

The Site is not directed to children under 13. The Contact form asks the sender to confirm that they are at least 13, but SoulPal does not currently collect age or date of birth or operate a technical age-verification gate, so it cannot reliably identify every under-13 user. If you believe a child has provided an account, pet photo or other personal information, contact support@soulpal.co so SoulPal can investigate and take appropriate steps within the limits described in Section 8.

14) Third-party links

The Site may contain links to third-party websites or services. Their privacy practices are governed by their own policies, not this Privacy Policy.

15) Changes to this Privacy Policy

The Site displays the effective date of this Privacy Policy. If we make material changes, we will update the policy and provide any additional notice or consent required by applicable law.

---