Privacy policy
This policy explains how personal data is processed when you use the service.
Last updated: 14 October 2026
1. Controller and contact
The controller is GVADEV SEMOU, Swiss sole proprietorship, Rue de Candolle 18, 1205 Geneva, Switzerland. Contact: [email protected].
2. Data and purposes
We process contact details, uploaded photographs and generated portraits, order choices and status, payment information we receive, support messages, and technical data needed to operate and secure the service. We use these data to take and fulfil orders, create and deliver portraits, answer requests, prevent abuse, maintain security, and meet legal obligations.
3. Legal bases
Where the GDPR applies, we rely on steps to enter into and perform a contract, compliance with legal obligations, and legitimate interests where appropriate. We process data that require consent only after valid consent has been given. In Switzerland, processing follows the Federal Act on Data Protection (FADP).
4. Recipients and processing abroad
Recipients are limited to these categories: website hosting and file storage, with file storage in the European Union; email delivery in Switzerland; an AI image-generation provider acting as our processor; and Link (Stripe), the seller shown at checkout, which processes payment data under its own privacy policy and acts as an independent controller for its processing. Under its paid service terms, the AI provider does not use prompts, uploaded files, or responses to train or improve its models. It may retain them for a limited period to prevent abuse and meet legal disclosure obligations. Data may be stored or processed in any country where the provider or its agents maintain facilities, including the United States. Processing is governed by the provider’s data-processing terms, including standard contractual clauses. International disclosures may therefore involve the European Union, the United States, and other countries where the AI provider has facilities, subject to those contractual safeguards. The named list of our service providers is available on request at [email protected].
5. Retention
The quarantine copy is deleted after normalisation. The cleaned source photo is deleted 7 days after delivery; the generated portrait is kept for 30 days after delivery. The download link is valid for 30 days and allows up to 3 downloads. For an unpaid order, the photo is deleted after 24 hours and order metadata 30 days after expiry. A customer profile is kept for 12 months after the latest order. 30 days after closure, paid-order metadata is reduced to the minimum accounting record, which includes both consent records, and is deleted 10 years after closure. Erasure journals are kept for 10 years and use hashed identifiers. Encrypted backups are retained in 7 daily, 4 weekly, and 3 monthly copies; after a restore, the erasure journal is reapplied. Service logs use 3 rotating files of 10 MB each and have no fixed time-based retention period. Refunds, disputes, and legal obligations may require a targeted hold.
6. Rights and requests
Customers and any identifiable person depicted may request access, rectification, or erasure. Use the privacy request form on this site or email [email protected]. We verify requests by email before acting. Where the GDPR applies, we respond within one month, subject to any lawful extension. Accounting duties, active disputes, and legal claims may require us to retain limited information. Providers and backups may follow their own deletion schedules. You may also send requests to delete Managed Payments data directly to Link.
7. Photographs and model training
Every identifiable person in a submitted photograph must be an adult and must have agreed to its use. We do not use customer photographs to train or improve AI models. The AI provider’s paid terms state that prompts, uploaded files, and responses are not used to train or improve its models.
8. Cookies and local storage
Analytics is disabled by default and no analytics tracker is loaded. The service worker caches public files. sessionStorage holds the order access token, selected order options, and the email entered for checkout during the browser session. localStorage only remembers a language you explicitly choose. These functions support the service; no non-essential tracker is active.
9. Language and updates
The French version prevails. Translations follow mandatory language requirements that apply to the customer. The version shown when you place an order applies to that order.
Exercise your data rights
You can ask to access, correct, or erase personal data using our dedicated form.
Open the personal data request form