Privacy Policy

Short version: we hold your email, your payment history, your photographs and the video ideas you type. Uploaded photographs are deleted from our storage after seven days. We do not sell data and we do not run advertising trackers. We use Google Analytics to count visits and see which links bring people here. Images are made by Google, which does not train on them. Videos are made by Higgsfield, whose terms allow it to use what it receives to improve its models; we ask you to agree to that before every video.

What we collect

• Your email address. It is your account. We have no password for you, because we do not use passwords.
• Photographs you upload. Stored in private storage. No public link to them exists.
• Images and videos we generate for you. Kept so you can download them again.
• The video ideas you type. Kept with the video so that a complaint about misuse can be investigated, and deleted with it.
• Your credit history. What you bought, what you spent, what was refunded.
• The boxes you tick. The date and time you agreed to these terms, confirmed you are 18 or older, and confirmed you may upload a photo. We keep those because they are our record that you agreed.
• Ordinary server logs. Requests to the site are logged by our hosting provider for a short period with the IP address they came from, as every website’s are. We do not build profiles from them.

We never see or store your card details. Payments are handled entirely by Stripe, and your card number does not touch this site.

What we do not collect

No advertising trackers, no session recording, no keystroke logging, no fingerprinting, no social media pixels. Besides the cookie that keeps you signed in, the only cookies are Google Analytics’ visit counters, which see the pages you open and the link you came from, never your photos, videos or account. The browser is told, in the page’s security policy, not to load code from anyone but us and Google Analytics.

How long we keep things

• Photographs you upload: 7 days, then deleted automatically by a job that runs every day. Not archived, not moved. Deleted.
• Images we generated for you: 90 days, so you can come back for them. Download anything you want to keep.
• Your account, credit history and consent records remain until you ask us to delete the account.

Photographs of people

Only upload photographs of people who have agreed to it, and never of anyone under 18. We ask you to confirm this before your first upload, and we keep the time you confirmed it.

We do not perform facial recognition. We do not measure, map, store or compare face geometry, and we do not attempt to identify anyone from a photograph. Your photograph is sent to an AI service to make the image or video you asked for. Our providers’ own handling of it is described under “Who else touches your data” below.

Illinois residents, and biometric privacy law. This business operates from Illinois and takes the Biometric Information Privacy Act seriously. In our view we do not collect biometric identifiers as that law defines them: no face geometry is measured, no template is made, nothing is used to identify anyone. Because the law is broad, we also do the things it asks of a business that does handle such data:

• Written notice and consent. Before your first upload we tell you that the photograph goes to an AI image service to be redrawn, and you give written consent by ticking the box, for yourself and on behalf of everyone in the photograph whose agreement you have obtained. The time you did so is kept. Section 3 of the Terms sets out that consent.
• Retention schedule and destruction. Uploaded photographs, and any data derived from them other than the finished image you asked for, are permanently destroyed within seven days of upload by an automatic daily job, and immediately if you delete your account. That is the earlier of the purpose being satisfied and the deadline. This page is our published retention schedule.
• No sale, no profit. We do not sell, lease, trade or otherwise profit from photographs, faces, or anything derived from them, and we do not disclose them to anyone except the AI providers named below, for the purpose of producing what you asked for, on the terms described there.
• Storage and security. Photographs are held in private storage with no public address, with access limited to the server, and are protected at least as carefully as any other confidential data we hold.

If you believe we hold biometric data about you, or want it deleted sooner, write to us and we will act on it.

Who else touches your data

This is the complete list.

• Google (Gemini API) receives your photograph and our instructions for image templates, and reads your video idea and small copies of your photos to screen it and write the video prompt. We use Google’s paid API tier, under which Google states it does not use your prompts, images or responses to improve its products.
• Higgsfield receives your photographs and the video prompt for video templates and returns the video, using models it hosts such as ByteDance Seedance. Higgsfield’s terms allow it to use the inputs and outputs it receives to train and improve its models and to keep generated files for at least seven days. We tell you this and ask you to agree before every video. If you do not want that, use an image template, which never goes to Higgsfield.
• Supabase stores the database and the photographs in a private bucket.
• Stripe handles payments and holds your card details, not us.
• Railway hosts the website and its server logs.
• Our email provider delivers the one-time sign-in codes.

Each of these processes data on our instructions. We do not sell data, and we have no data-sharing arrangements with anyone else. All of these services store data in the United States.

AI-generated images

Every image this service produces is generated by an AI model. Images from our provider carry an invisible digital watermark (Google’s SynthID) identifying them as AI-generated; we do not remove it. If you publish an image, some platforms or laws may require you to say it was made with AI. That is your responsibility.

Children

This service is for adults. You must be 18 or older to create an account, and you confirm that when you sign in. We do not knowingly collect information from anyone under 18, and we do not permit photographs of minors. If you believe we hold a child’s data, email us and we will delete it.

Your rights

Wherever you live, email us and we will do any of the following: tell you everything we hold about you, send you a copy of it, correct it, or delete your account and everything in it. No charge, no forms, and we aim to do it within 30 days. We will never treat you differently for asking.

Residents of California and other US states with privacy laws have these rights by statute, including the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information as those laws define it, we do not run targeted advertising, and we do not use personal information for profiling that produces legal or similarly significant effects, so there is nothing to opt out of. We honour Global Privacy Control signals by default because there is nothing they would need to switch off. If we ever decline a request, we will say why, and you may appeal by replying to that email.

If you are in the European Economic Area, the United Kingdom or Switzerland: we are the controller of your data, our legal bases are contract (providing the service), consent (the boxes you tick), and legitimate interest (keeping the service secure). Your data is processed in the United States by the providers listed above under their standard contractual clauses. You have the rights above plus the right to object, to restrict processing, to data portability, and to complain to your local supervisory authority.

Deleting your account removes your photographs, your generated images, and your history. Unused credits are forfeited when you ask for deletion, so use them first.

Security

Photograph storage is private, with no public URLs. Downloads use links that expire after one hour. The database is configured so that a signed-in account can read only its own rows and can write nothing directly. All traffic is encrypted in transit.

No system is perfect. If we ever discover a breach affecting your data, we will email you about it without undue delay.

Changes

The date at the top shows when this page last changed. If a change matters, we will ask you to agree to it again the next time you sign in.

Contact

angel@globalpresencemedia.com. AI Creator Lab Studio, Chicago, Illinois, USA.