Privacy Policy

Who is responsible

The data controller is [Company legal name], [Street, postcode, city, country]. Contact: [contact email].

What we process

Account data: email address, display name and sign-in details.

Photos you upload and the portraits generated from them. Uploaded selfies contain facial images; we process them only to create the portraits you request.

Purchase data: pack bought, amount and payment status. Card details are handled by Stripe and never reach our servers.

Technical data: device, browser and essential logs needed to run the service securely.

Why and on what legal basis

To provide the service you ordered (Art. 6(1)(b) GDPR). Processing facial images is based on your explicit consent when you upload a photo (Art. 9(2)(a) GDPR), which you can withdraw at any time by deleting the photo.

To meet tax and accounting obligations (Art. 6(1)(c) GDPR).

Optional analytics only with your consent (Art. 6(1)(a) GDPR).

Processors

Hosting, database and storage providers; Stripe Payments Europe for payments; an AI image provider that receives your photo only to generate the requested portrait and does not use it to train models. Transfers outside the EEA rely on Standard Contractual Clauses.

How long we keep data

Photos and portraits stay in your private gallery until you delete them or close your account. Purchase records are kept for the period required by tax law (up to 10 years).

Your rights

You have the right to access, rectify, erase, restrict, port and object to processing, and to withdraw consent at any time. Write to us at the email above. You may also lodge a complaint with your national data protection authority.