Privacy policy
Last updated October 24, 2026
Derpy Pets (derpypets.ca) is run by Eagle Vision Video Productions Ltd. in British Columbia, Canada. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA). This policy explains what we collect, why, who helps us handle it, and the choices you have.
Who is responsible
Our privacy officer is Ben, reachable at ben@eaglevisionvideo.ca. Write to this address for any question, request or complaint about your information.
Accounts are for adults
You must be 18 or older to create an account, upload drawings or buy. Children can draw; a parent or guardian uploads. By uploading a child’s drawing and caption you confirm you are that child’s parent or guardian, or have their permission. We don’t knowingly collect information directly from children.
What we collect
- Account: your email address. If you sign in with Google or Facebook, we also receive the name and profile picture on that account. We never receive your password.
- Drawings and captions: the images you upload, and what you type with them (creature name, the artist’s first name, age and the date drawn). Please use first names only, and don’t upload photos that show a child’s face or anything identifying like a school name or address.
- Books we make: the pages, cover and PDF generated from your drawings, and your choices (Derp-O-Meter setting, world, print options, page picks).
- Orders: what you bought, the price and tax, and the name, shipping address, phone number and email you give at checkout. Card details go straight to Stripe; we never see or store them.
- Technical: a sign-in cookie that keeps you logged in, and basic server logs (IP address, browser, pages requested) kept for security and troubleshooting. We don’t use advertising or tracking cookies.
Why we use it
- To make, print and ship your book or deliver your PDF.
- To email you about your order and book: confirmations, sample pages, pages that need your pick, printing, shipping and tracking, and any problem. These are service messages; we don’t send marketing emails unless you separately ask for them.
- To keep the service safe: screening uploads and generated pages, preventing fraud and meeting our legal duties.
- To keep the business records tax law requires.
We use your information only for these purposes. We never sell it, never publish your drawings or books, and never use them for advertising.
How drawings are processed by AI
- Your drawings are stored privately and are visible only to your account (and to us when we need to fix a problem with your book).
- To make your pages, drawings and captions are sent to our AI provider, OpenAI. It inspects each drawing, draws the pages and screens content. (We may use Anthropic for the art-director step instead; the same terms apply.) Through these business services, your content is not used to train their models. The providers may keep it for up to 30 days to monitor for abuse, then delete it.
- We do not use your drawings or books to train any AI model.
Child safety
Every upload and every generated page is screened automatically. Explicit or harmful material is blocked and deleted. As Canadian law requires, we report child sexual abuse material to Cybertip.ca and the police, and we may keep the information the law requires us to preserve.
Who else handles your information
We use these service providers. Each gets only what it needs to do its job, under a contract to protect it:
- Vercel: website hosting.
- Supabase: accounts, database and private file storage.
- OpenAI (and possibly Anthropic): page generation and content screening.
- Stripe: payments and sales tax.
- Lulu: printing and shipping printed books. It receives the book files and your shipping details.
- Resend: sending our emails to you.
- Google and Facebook: only if you choose to sign in with them.
- Microsoft PhotoDNA (or a similar service): matching uploads against known child-abuse imagery, once connected.
Several of these companies are in the United States, and your information may be stored or processed there or in other countries. While it is outside Canada it is protected by our contracts, but it may be accessible to courts, law enforcement and national security authorities there under local law.
How long we keep it
- Drawings, pages and books: until you delete the book or your account. You can do either at any time from My books, and the files are deleted from storage.
- Order records (what was bought, price, tax, date): 6 years, as Canada Revenue Agency rules require. When you delete your account, we remove your name, email and address from these records.
- Server logs: up to 90 days.
Your choices and rights
- Ask for a copy of the personal information we hold about you, or to have it corrected.
- Delete a book or your whole account from My books, or ask us to do it.
- Withdraw your consent. We will then stop making your book, and we can’t finish an order without the information it needs.
Email ben@eaglevisionvideo.ca and we’ll answer within 30 days. If you aren’t satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).
Security
Everything travels encrypted (HTTPS). Files sit in private storage that can be reached only through short-lived links. Access to our systems is limited to the people who run Derpy Pets, and you can turn on 2-step verification for your account. If a breach ever created a real risk of significant harm, we would tell you and the Privacy Commissioner, as the law requires.
Changes
If we change this policy we’ll update the date at the top. For a significant change, we’ll email account holders before it takes effect.