Art Persona · Acceptable Use Policy · v1.0 · Effective 30 July 2026
| Field | Value |
| Operator | GromeFeet OÜ |
| Company number | 17348635 |
| Registered office | Pärnu mnt 12, Kesklinna linnaosa, 10148 Tallinn, Harju maakond |
| Trading name / brand | Sanat Kişiliği |
| Website | https://art-persona.com |
| Contact email | info@art-persona.com |
| Support / complaints | info@art-persona.com (Monday-Friday, 09:00-17:00 Estonia time, excluding public holidays) |
| Governing law | Estonia, subject to mandatory consumer protections |
| Document version | v1.0 |
| Effective date | 30 July 2026 |
| Important: Users must own or have authority to use submitted images and must not create deceptive impersonations, non-consensual deepfakes, sexualised images of minors, fraud content or other unlawful or harmful material. Serious misuse can result in immediate refusal, account closure and reporting. |
1. Scope and relationship with other documents
This policy applies to website access, account use, checkout, Customer Materials, prompts, generated Outputs, downloads and communications with Art Persona. It supplements the Terms. A breach may also affect refund, cancellation, privacy or intellectual-property rights.
2. Core principle of permitted use
Users may create and use custom avatars for lawful expression, branding, entertainment and communication where they have the necessary rights and do not mislead, exploit or harm others. A technically possible request is not necessarily permissible. Context, audience, consent and likely impact all matter.
3. Account integrity and identity
Users must provide accurate information, protect credentials and use only accounts and payment methods they control. They must not impersonate another customer, conceal a sanctioned location, evade a restriction, buy or sell accounts, or misrepresent Art Persona Output as official identification, evidence or verified media.
Low-risk ambiguity may be resolved by clarification or modification, while credible fraud, exploitation or security threats justify immediate restriction.
4. Prohibited payment and checkout behaviour
Card testing, stolen payment data, false disputes, deliberate duplicate orders, promotion abuse, laundering, refund fraud and chargeback-as-theft are prohibited. Users must not manipulate location, device or identity signals to bypass risk controls. Art Persona may stop delivery and provide evidence to providers or authorities where lawful.
5. Prohibited deceptive or harmful avatar use
Users must not create or distribute an avatar to deceive others about a person’s identity, endorsement, conduct or statements; facilitate fraud; falsify evidence; conduct harassment; interfere with elections; or cause material reputational or economic harm. Satire and fiction must be presented in a context that does not create a materially false impression.
6. Prohibited technical interference
Users must not introduce malware, automate abusive requests, scrape protected content, probe vulnerabilities, overload systems, bypass rate limits, defeat safety filters, reverse engineer non-public components or obtain another user’s files. Security research requires prior written authorisation and a defined scope.
Users should preserve relevant consent and stop challenged activity while a credible rights or safety report is reviewed.
7. Content, conduct and communications standards
Customer Materials and support communications must not contain unlawful threats, hate targeting protected groups, sexual exploitation, non-consensual intimate content, instructions for serious wrongdoing, graphic abuse, or personal data published to intimidate. Support staff must not be harassed, coerced or deceived.
8. Intellectual property and unauthorised commercial exploitation
Users must own or lawfully control source images, logos, characters, trademarks and other materials. They may not request close imitation that infringes a third party’s rights, remove rights-management information, resell access to Art Persona systems, or market unlicensed templates or production methods as their own.
9. Consent, public figures and image rights
An identifiable person’s image must be used with valid authority. Extra scrutiny applies to public figures, employees, children, vulnerable persons and sensitive contexts. Users may be asked to prove consent or legitimate journalistic, artistic or public-interest grounds. Art Persona may refuse a request even where legality is uncertain but risk is credible.
Evidence is handled on a need-to-know basis and retained only as long as required for enforcement, claims or reporting duties.
10. Children and protective restrictions
Adults must not allow children to operate the Service independently. Sexualised, exploitative, violent or humiliating depictions of minors are prohibited. Age-regression or age-progression requests involving a minor are accepted only where benign, consented and appropriate. Suspected child exploitation can be reported to competent authorities.
11. Reporting, investigations and cooperation
Suspected misuse should be reported to info@art-persona.com with the relevant URL, order reference or evidence. Users must preserve records and cooperate with proportionate questions. Art Persona may review logs, payment status, source materials and Outputs, and may contact a depicted person, rights holder, provider or authority where necessary and lawful.
12. Enforcement measures
Responses include warning, content refusal, revision limits, access restriction, cancellation, licence termination, removal of hosted files, refund refusal where lawful, account closure, payment-provider notification and legal action. Severity, intent, recurrence, vulnerability of affected persons and ability to reduce harm guide the response. Urgent preventive action may precede notice.
Context, audience, realism, intent and foreseeable harm are assessed together; a public image is not automatically authorised for transformation.
| Behaviour | Why prohibited | Likely response |
| Upload another person’s image without authority | Violates privacy, image or publicity rights | Consent request, refusal, removal or termination |
| Use an avatar to impersonate a bank, employer or public authority | Creates material deception and fraud risk | Immediate restriction, evidence preservation and possible reporting |
| Create non-consensual intimate or sexualised minor content | Severe safeguarding and legal risk | Immediate termination and reporting where required |
| Use stolen cards or false chargebacks | Payment fraud and network abuse | Order cancellation, account closure and provider cooperation |
| Scrape, attack or bypass safety controls | Threatens confidentiality, availability and integrity | Technical block, termination and legal action |
| Use a compliant Output in lawful branding | Permitted subject to rights and licence | No action |
13. Relationship to refunds, cancellation and data requests
A policy breach does not automatically remove mandatory consumer rights, but Art Persona need not refund value already supplied where the customer caused the breach and law permits refusal. Cancellation and licence effects follow the relevant policies. A privacy request does not require deletion of evidence needed to investigate abuse, fraud or legal claims.
14. Amendments and version control
This policy may change to address emerging misuse, new technology, legal duties or platform risks. The current published version applies to ongoing access and future conduct. A change will not retroactively convert lawful past conduct into a breach, but continuing harmful activity may be restricted once the updated rule is effective.
15. Contact
Reports, appeals and questions should be sent to info@art-persona.com. An appeal should identify the decision, explain the disputed facts and include any consent or rights evidence. Art Persona aims to acknowledge within two business days and provide a reasoned response within ten business days, subject to urgent safety or legal constraints.
An appeal receives human review unless disclosure would undermine safety, security, fraud prevention or a legal obligation.
Illustrative Examples of Unacceptable Use
• Creating an avatar of a fictional chief executive and using it in messages that request employee bank transfers.
• Uploading a former partner’s photograph to create humiliating or intimate imagery without consent.
• Generating a realistic public-figure avatar and presenting a fabricated endorsement as genuine.
• Using many accounts and payment cards to test stolen credentials or repeatedly claim promotional benefits.
• Removing context labels from satire so that viewers are likely to believe a depicted event actually occurred.
• Sharing a secure download link publicly to enable unauthorised access or to expose another person’s image.
User Good-Faith Expectations
• Ask permission before uploading an identifiable person and keep evidence appropriate to the context.
• Describe the intended use honestly when it affects consent, safety or the rights of a public figure or minor.
• Label fictional or synthetic material where a reasonable viewer could otherwise be materially misled.
• Use payment and dispute channels honestly and contact support before escalating a correctable issue.
• Stop challenged use while Art Persona reviews a credible rights or safety report.
• Respect removal, licence termination and refund consequences, including deletion of refunded Output.
16. Governing law and mandatory rights
This Acceptable Use Policy is governed by Estonian law. Enforcement does not remove mandatory consumer, privacy, expression or procedural rights, and restrictions are interpreted consistently with applicable law. A user may challenge a decision through the stated appeal route and any competent authority or court.
Safety enforcement framework
Safety operations use graduated risk tiers. Ambiguous low-risk content can be clarified or modified; credible image-rights, impersonation or payment concerns require evidence and manual review; severe exploitation, fraud or security threats justify immediate restriction and possible reporting. Decisions are documented neutrally and harmful content is not retained longer than necessary.
Reviewers consider the depicted person, uploader authority, intended audience, realism, accompanying claims and foreseeable harm. Consent for one context does not automatically authorise another, and a public figure or publicly accessible photograph is not treated as free of personality, copyright or data-protection rights. Requests involving minors receive heightened scrutiny and require an adult with verifiable authority.
Appeals are reviewed by a person not solely reliant on the original automated flag where practicable. Art Persona may withhold sensitive detection logic or another person’s data, but communicates the operative rule and outcome. Reinstatement, modification, deletion, refund and licence consequences are coordinated across the relevant policy rather than imposed as disconnected measures.
• Ownership and approval: The named operational owner confirms that the customer-facing rule, production workflow and support script describe the same outcome before publication.
• Change control: A material product, provider or checkout change is assessed for legal impact and deployed only after the affected wording, controls and training have been updated.
• Customer evidence: Staff rely on the minimum relevant Order, communication, delivery and payment evidence and do not request unrelated identity, image or card information.
• Exception handling: An unusual case is escalated to a competent reviewer rather than resolved through an undocumented promise that conflicts with the published terms or mandatory law.
• Quality assurance: Sample cases are tested from customer request through final outcome, including the status visible to support and the records needed to explain the decision.
• Access control: Systems and provider dashboards use role-based access, strong authentication and prompt removal of credentials when responsibilities change.
• Customer communication: Notices state what happened, what the customer must do, the expected next step and the available escalation route without overstating technical or legal certainty.
• Provider alignment: The configuration and contractual scope of each processor or platform are checked against the functions attributed to it in this policy.
• Incident response: A security, delivery, payment or rights incident is contained, documented and routed to privacy, consumer, payment or legal response procedures as applicable.
• Training: Personnel who operate the relevant workflow receive concise instructions, prohibited practices and escalation examples before handling live Orders.
• Monitoring: Material failure patterns, complaints and reversals are reviewed for root cause and corrective action rather than treated only as isolated customer-service cases.
• Retention discipline: Operational evidence is retained for the applicable legal or dispute period and then deleted or anonymised when no continuing purpose justifies it.
• Version integrity: The effective version accepted or presented for an Order can be identified, while the website clearly presents the current version for future transactions.
• Remediation: A confirmed control gap is corrected promptly, affected processing or fulfilment is paused where necessary, and impacted customers receive the remedy required by law.
• Management review: Senior management periodically reviews whether the policy remains accurate for the live commercial model, risk appetite and acquiring arrangements.
• Auditability: A reviewer can reconstruct the material decision and execution status without relying on private memory, informal chat or inaccessible personal files.
• User journey review: The desktop and mobile journeys are checked from entry page through consent, checkout, fulfilment and post-purchase support for accuracy and accessibility.
• Data minimisation: Forms, logs and case templates collect only fields needed for the stated purpose and avoid free-text requests for sensitive information where structured evidence is sufficient.
• Supplier exit: Replacement or termination of a provider includes export or deletion of relevant records, revocation of access and removal of obsolete code, links and policy references.
• Complaint learning: Substantiated complaints are mapped to the control that failed, assigned a corrective-action owner and retested after remediation.
• Business continuity: Contingency steps preserve customer communications, secure evidence and lawful remedies when a critical provider or internal system is unavailable.
Art Persona · Acceptable Use Policy · v1.0 · Effective 30 July 2026. Published on the website; subject to update; the current published version governs.