This Privacy Policy explains how NanoPhotoStudio collects, uses, and protects your personal information when you use our AI portrait generation service. We are committed to protecting your privacy and ensuring transparency about our data practices.
1. Information We Collect
We collect the following types of information to provide and improve our services:
- Photos and Images: Selfies you upload or capture using your device's camera for portrait generation. These images contain facial features necessary for creating AI-generated portraits.
- Session Data: Anonymous session identifiers to manage your generation requests and link your uploads to your generated outputs.
- Device Information: Basic technical information such as browser type, operating system, and screen resolution to optimize your experience.
- Usage Analytics: Aggregated, non-personal data about how you interact with our service, including pages visited, features used, and generation preferences.
- Cookies and Local Storage: We use essential cookies and local storage to maintain your session state and remember your preferences.
We do not require you to create an account or provide personal contact information for basic usage. Premium features may require email verification through magic links.
2. How We Use Your Information
Your information is used exclusively for the following purposes:
- Portrait Generation: Your uploaded photos are sent to our AI processing pipeline solely to generate styled portraits based on your selected style preferences.
- Service Delivery: Session data ensures your generated portraits are correctly linked to your session and available for download.
- Quality Improvement: Aggregated analytics help us understand usage patterns and improve our service performance and user experience.
- Technical Operations: Device information helps us optimize rendering and ensure compatibility across different browsers and devices.
- Communication: If you opt in for email notifications, we may send you updates about your generation status or service announcements.
Important: We do NOT use your photos for AI model training, machine learning purposes, or any other purpose beyond generating your requested portrait. Your images are never used to improve our AI models without your explicit, separate consent.
3. Data Storage & Retention
We implement strict data retention policies to minimize the storage of your personal data:
- Photo Storage: Your uploaded selfies are stored temporarily on secure cloud servers only during active processing. Original uploads are automatically deleted within 24 hours of session expiration.
- Generated Portraits: Your AI-generated portraits are retained for a limited period (typically 7 days) to allow you to download them. After this period, they are permanently deleted.
- Session Data: Anonymous session identifiers expire and are deleted after 30 days of inactivity.
- Analytics Data: Aggregated usage statistics are retained indefinitely but contain no personally identifiable information.
- Encryption: All data is encrypted both in transit (using TLS 1.3) and at rest (using AES-256 encryption).
Our infrastructure is hosted on Cloudflare's global edge network, with data stored in secure R2 object storage. We do not maintain long-term backups of your photos or generated images.
4. Information Sharing
We are committed to protecting your privacy and limit data sharing to essential service operations:
- Cloud Infrastructure: We use Cloudflare (storage, compute) and Vercel (web hosting) to deliver our service. These providers process data according to their privacy policies and our data processing agreements.
- AI Processing: Portrait generation is performed using Google's Gemini AI services. Image data is transmitted securely and processed according to Google's AI data handling policies.
- No Third-Party Marketing: We never sell, rent, or trade your personal information to advertisers, data brokers, or marketing companies.
- Legal Requirements: We may disclose information if required by law, court order, or government request, or to protect our legal rights.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, with continued protection under this policy.
All third-party service providers are bound by data processing agreements that require them to protect your data and use it only for providing their services to us.
5. Your Rights
You have the following rights regarding your personal data:
- Access: You can view and download all generated portraits associated with your session through the History page.
- Deletion: You can delete individual generations or your entire generation history at any time. Deletion is permanent and cannot be undone.
- Data Portability: You can download your generated portraits in standard image formats (PNG, JPEG) for use elsewhere.
- Opt-Out: You can clear your local session data and cookies at any time through your browser settings.
- Withdraw Consent: If you've opted into email notifications, you can unsubscribe at any time using the link in any email.
- Inquiries: You can contact us to request information about what data we hold about your session.
Since we use anonymous sessions rather than user accounts, we cannot identify data belonging to you once your session expires. We recommend downloading your generated portraits before your session ends.
6. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:
- Email: privacy@nanophotostudio.com
- Response Time: We aim to respond to all privacy-related inquiries within 72 hours.
- Language: We can respond in English and Chinese.
For urgent privacy concerns or to report a potential data breach, please include 'URGENT' in your email subject line.
