Privacy Policy

1. Introduction

At Ai Photographer ("we," "us," or "our"), trust is our fundamental currency. We built this platform to bring professional studio photography to everyone, but we understand that handling your photos requires the highest standard of privacy and security. This Privacy Policy explains exactly how we collect, use, protect, and delete your data—specifically focusing on your biometric information (your face).

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Biometric Data & Face Information

Collection: We collect facial images ("Selfies") that you explicitly upload to the Service for the sole purpose of training a personalized, private AI model ("LoRA") to generate headshots.

Usage: Your face data is used exclusively to: 1. Train a temporary AI model specific to you. 2. Generate the requested headshots.

Storage & Retention: Your uploaded images and the trained AI model are stored on secure, private servers (using providers like AWS S3 and Replicate). We strictly enforce a 30-day retention policy. After 30 days, your original files and the trained AI model are permanently deleted from our servers. You may also manually delete your data at any time via your Dashboard.

3. Data Security

We implement industry-standard security measures to protection your personal information:

• Encryption: All data is encrypted in transit (SSL/TLS) and at rest.
• Isolation: Your custom AI model is private and accessible only by you. It is never shared with other users or used to improve our general base models.
• Access Control: Strict internal access controls ensure that no unauthorized personnel can access your uploaded photos.

4. Third-Party Processors

To provide our Service, we work with trusted infrastructure partners. We have Data Processing Agreements (DPAs) in place with these providers to ensure they uphold our high privacy standards:

• Vercel: Web hosting and serverless infrastructure.
• Supabase: Database and authentication services.
• Replicate / Astria: Secure AI processing and model training.
• Stripe: Payment processing (we never see or store your credit card details).

5. Your Rights

Depending on your location (including GDPR for EU users and CCPA/CPRA for California residents), you have specific rights regarding your data:

• Right to Access: You can view all your stored data in your Dashboard.
• Right to Delete ("Right to be Forgotten"): You can permanently delete your images, models, and account at any time via the Settings page.
• Right to Rectify: You can update your account information at any time.

To exercise these rights beyond what is available in the Dashboard, please contact us at support@ai-photographer.com.

6. Cookies & Analytics

We use privacy-focused analytics (via Vercel Analytics) to understand website traffic without tracking individual users across the web. We use essential cookies for authentication and to ensure the site functions correctly. We do not use third-party advertising cookies.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.