Your Privacy is OurPriority
Learn how we collect, use, and protect your personal information when you use PortraitNova.
Last updated: January 6, 2025
Privacy Overview
What We Collect
Photos you upload, account info, usage data
How We Protect
256-bit encryption, secure storage, limited access
Data Retention
Images deleted after processing, accounts as needed
Your Rights
Delete, export, or modify your data anytime
1. Information We Collect
Personal Information
- Account Information: Name, email address, profile information
- Payment Information: Billing details processed securely through Stripe
- Photos: Images you upload for headshot generation
- Usage Data: How you interact with our service, generation history
Automatically Collected Information
- Device Information: Browser type, device type, operating system
- Log Data: IP address, access times, pages viewed
- Cookies: Essential cookies for functionality, analytics cookies with consent
2. How We Use Your Information
- Service Provision: Generate AI headshots from your uploaded photos
- Account Management: Create and maintain your account, process payments
- Communication: Send service updates, support responses, billing notices
- Improvement: Analyze usage patterns to improve our AI models and service
- Legal Compliance: Meet legal obligations and protect our rights
3. AI Processing and Your Photos
Photo Processing
When you upload photos to PortraitNova:
- Photos are processed by our AI partners to generate headshots within 90 seconds
- Original photos are automatically deleted after processing (typically within 24 hours)
- Generated headshots are stored securely for download and account history
- We do not use your photos to train AI models without explicit consent
AI Partner Processing
Our AI partners may temporarily process your photos according to their privacy policies. We ensure all partners meet strict privacy and security standards.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information with:
Service Providers
- AI Processing: Third-party AI services for headshot generation
- Payment Processing: Stripe for secure payment handling
- Authentication: Clerk for secure user authentication
- Storage: Supabase for secure data storage
Legal Requirements
We may disclose information when required by law, to protect our rights, or in case of business transfer.
5. Data Security
- Encryption: All data transmitted using 256-bit SSL encryption
- Access Controls: Limited employee access with multi-factor authentication
- Regular Audits: Security assessments and vulnerability testing
- Compliance: SOC 2 Type II compliance standards
6. Data Retention
- Original Photos: Deleted within 24 hours of processing
- Generated Images: Stored while our service operates
- Account Data: Retained while your account is active and service operates
- Service Changes: 90-day notice provided for significant service changes
- Legal Data: Some data retained as required by law
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct your information
- Deletion: Request deletion of your data
- Portability: Export and download all your generated images at any time
- Data Export: Bulk download tools available in case of service changes
- Objection: Object to certain types of processing
8. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers.
9. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our service.
11. Contact Us
For questions about this Privacy Policy: Email privacy@portraitnova.app, use our contact form, or mail PortraitNova Data Protection Officer.
Questions About Your Privacy?
We're committed to protecting your privacy and being transparent about our data practices.