Privacy Policy

Account registration and sign-in

When you sign in with Google, we receive your name and email address from Google. We store these in our database to identify your account and deliver your portraits to you. If email sign-in is enabled, we also use your email address to send a sign-in link through Resend. Order and delivery emails use the same email provider.

Legal basis: Performance of a contract — Art 6(1)(b) GDPR. Processing your name and email is necessary to create and manage your account.

Photo uploads (input selfies)

You can upload 1–10 photos of yourself. The current portrait-generation service sends your source photos to Google's Gemini Developer API and OpenAI's Responses API with image generation to create the mixed-model set. Input photos are retained in your account alongside your generated portraits so you can review the source photos and regenerate if needed. They remain accessible until you request deletion or close your account.

Photos of your face: Photos contain personal information and may be sensitive. The upload page explains that service providers process and store them to create and deliver your portraits. Upload only photos you have permission to use. You may request deletion using the contact details above; this does not undo generation already completed.

Legal basis: Performance of a contract — Art 6(1)(b) GDPR for providing the service.

Generated portraits (output images)

The AI-generated portrait photos are stored in your account so you can download them at any time. They remain accessible until you request deletion or close your account.

Legal basis: Performance of a contract — Art 6(1)(b) GDPR.

Payment

When you purchase a plan, your email address and order details (tier, amount, currency, date) are processed by our payment provider. We store the order record in our database to fulfil your plan and for accounting purposes. We do not store credit card numbers — these are handled entirely by Stripe.

Legal basis: Performance of a contract — Art 6(1)(b) GDPR; legal obligation (tax and accounting records) — Art 6(1)(c) GDPR.

Account usage and service operation

We record how many generations you have remaining (your purchased allowance) and log standard server activity (IP address, request timestamps, error events) for security and debugging purposes. We also record first-party product events associated with your account, such as upload, checkout, ready-results views and downloads, to understand where the service fails or customers need help. Pirsch provides cookieless page analytics when configured. Error monitoring uses Sentry when configured.

Legal basis: Legitimate interests — Art 6(1)(f) GDPR. We have a legitimate interest in keeping the service secure and diagnosing faults. This processing is limited in scope and does not override your rights.

Marketing communications

After you create an account, we may send you occasional emails with photo tips, reminders to finish your order, and a follow-up after your portraits are delivered. You can opt out at any time using the unsubscribe link in any of these emails, or by replying to us. Opting out does not affect essential emails about your orders (receipts, delivery notifications, and refunds), which we still need to send.

Legal basis: Legitimate interests — Art 6(1)(f) GDPR. We have a legitimate interest in promoting our own similar services to people who have created an account. You may object to this processing at any time, as described above.

Google LLC — Authentication (Google OAuth)

Data shared: name and email address. Country: United States. Google's applicable privacy and processing terms govern this service.

Google LLC — AI Generation (Gemini API)

Data shared: your uploaded photos (potentially biometric data). Country: United States. Google's applicable API data-processing and retention terms apply. We do not promise that third-party services retain no data or offer identical training policies across every account configuration.

OpenAI — Portrait Generation

Data shared: your uploaded photos and generation instructions through the Responses API with image generation. API response state may also be retained by the provider. OpenAI's applicable API processing and retention terms apply.

Stripe Inc. — Payment Processing (all markets)

Data shared: email address, order amount and currency. Country: United States. Stripe's applicable privacy and processing terms apply.

Vercel Inc. — Hosting and File Storage

Data shared: all data in transit and at rest (account data, uploaded photos, generated portraits). Country: United States. Vercel's applicable privacy and processing terms apply.

Neon Inc. — Database (Postgres)

Data shared: all structured user and order data stored in our database. Country: United States. Neon's applicable privacy and processing terms apply.

Resend — Service Email

Data shared: your email address and sign-in or service-message content.

Pirsch and Sentry — Analytics and Error Monitoring

When configured, these services receive page analytics or diagnostic event data. We do not use product events to send your photos to advertising platforms.

Authentication session cookie

Purpose: Maintains your authenticated session so you stay logged in. Type: HTTP-only, Secure, SameSite=Lax. Duration: Session / up to 30 days.

Authentication security cookie

Purpose: Protects against cross-site request forgery attacks. Type: HTTP-only, Secure. Duration: Session.

Authentication callback cookie

Purpose: Remembers where to redirect you after sign-in. Type: Short-lived. Duration: Expires immediately after use.

Right of access (Art 15)

You can request a copy of all personal data we hold about you.

Right to rectification (Art 16)

You can ask us to correct inaccurate or incomplete data.

Right to erasure (Art 17)

You can request deletion of your data. We will erase your account and generated portraits promptly. Note: order records must be retained for 7 years under accounting law and cannot be deleted on request.

Right to restriction of processing (Art 18)

You can ask us to temporarily stop processing your data in certain circumstances, for example while a dispute is being resolved.

Right to data portability (Art 20)

You can request your data in a structured, machine-readable format (e.g. JSON). This applies to data you provided and that we process by automated means on the basis of contract or consent.

Right to object (Art 21)

You can object to processing based on legitimate interests (Art 6(1)(f)). We will stop unless we have compelling legitimate grounds that override your interests.

Right to withdraw consent (Art 7(3))

Where processing is based on your consent, such as optional advertising measurement, you can withdraw it at any time using “Advertising privacy choices” at the bottom of the site. Withdrawal does not affect processing carried out before withdrawal. Contact us for photo deletion and other privacy requests.

Right to lodge a complaint (Art 77)

You have the right to complain to a supervisory authority. Our lead supervisory authority is the Czech data protection authority:

If you are based in another EU member state, you may also lodge a complaint with the supervisory authority in your country of habitual residence or place of work.