Privacy Policy

PortraifyAI ("we", "us", or "our") operates the PortraifyAI platform accessible at portraifyai.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

We collect the following categories of information:

• Account information — name, email address, and password (hashed) when you register.
• Uploaded photos — images you upload to generate professional headshots. These are stored securely and used solely for generation purposes.
• Generated images — the AI-produced headshots associated with your account.
• Payment information — billing details are collected and processed by Stripe. We do not store your full card number on our servers.
• Usage data — log data including IP address, browser type, pages visited, time spent, and referring URLs.
• Communications — messages you send us via support tickets or email.

• To provide, maintain, and improve the Service.
• To process transactions and manage your subscription.
• To generate AI headshots from your uploaded photos.
• To send transactional emails (e.g. receipts, account alerts).
• To respond to support requests and inquiries.
• To detect, prevent, and address fraud or abuse.
• To comply with legal obligations.

Your uploaded photos are processed by the Google Gemini API and/or Replicate AI models solely to generate your requested headshot. We do not use your photos to train AI models. Uploaded source photos are automatically deleted from our processing pipeline within 24 hours of generation. Generated headshots are stored in your account until you delete them or close your account.

We do not sell your personal data. We may share information with:

• Service providers — Supabase (database & storage), Stripe (payments), Google (AI generation), Replicate (AI generation), Vercel (hosting). Each is bound by data processing agreements.
• Law enforcement — when required by applicable law, court order, or governmental authority.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred.

We retain your account data for as long as your account is active. Uploaded source photos are deleted within 24 hours of generation. Generated headshots remain until you delete them. Upon account deletion, all personal data is removed within 30 days except where retention is required by law.

We use essential cookies for authentication sessions. We do not use advertising or third-party tracking cookies. You may disable cookies in your browser settings, but this may affect Service functionality.

We implement industry-standard safeguards including TLS encryption in transit, AES-256 encryption at rest, row-level security in our database, and regular security reviews. However, no method of transmission over the internet is 100% secure.

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict processing of your data.
• Data portability.

To exercise any of these rights, contact us at privacy@portraifyai.com or use the account deletion option in Settings.

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with a revised "Last updated" date and, where appropriate, by email.

If you have questions about this Privacy Policy, please contact us at:
PortraifyAI
Email: privacy@portraifyai.com
Support: portraifyai.com/contact