Privacy policy

Last updated: [date]

Draft to complete and have reviewed by a legal professional before going live. Replace the parts in square brackets [ ].

Data controller

[Name or company name, address, contact email].

Data processed and purposes

• Email address: account creation, sign-in, sending your receipt. Legal basis: performance of the contract.
• Uploaded selfies: creating your portraits, and nothing else. Legal basis: your consent, given at upload. They are not used to identify you or to train an AI model.
• Generated portraits: making them available for download. Legal basis: performance of the contract.
• Purchases: order history and accounting obligations. Legal basis: legal obligation.

Retention periods

• Selfies: deleted automatically 7 days after upload.
• Generated portraits: deleted automatically 30 days after creation.
• Account and credits: until the account is deleted, on request.
• Billing data: 10 years (accounting obligation).

Recipients and processors

• Supabase (database and photo hosting, European Union region).
• fal.ai (portrait generation, United States): receives your selfies for the time of processing. Transfer covered by [standard contractual clauses / Data Privacy Framework — to be checked].
• Stripe (payments) and Vercel (website hosting).

No data is sold or used for advertising.

Your rights

Access, rectification, erasure, restriction, objection, portability and withdrawal of consent: write to [contact email]. You can also lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).

Cookies

Selfigenic only uses the cookies needed for sign-in. No advertising or consent-based analytics cookies.

Artificial intelligence

Portraits are generated by an AI system. Each image contains a machine-readable label stating so.