Privacy Policy

1. Who We Are

Heir Portraits ("we," "us," "our") provides an AI-powered portrait generation service that transforms photos into oil painting–style portraits. We are the data controller for personal data processed through heirportraits.com.

2. What We Collect

Photos you upload. When you use our service, you upload one or more photos. These are transmitted to our image generation service for the sole purpose of creating your portrait. They are not stored permanently — see Section 5 for retention details.

Email address. If you choose to save your portrait or receive order confirmations, we collect your email address. This is optional except where required to fulfil a paid order.

Session data. We use browser sessionStorage and server-side session identifiers to hold your portrait and order state during your visit. This data is temporary and tied to your browser session.

Payment information. Payments are processed by Stripe. We do not receive or store your card details. Stripe's privacy policy applies to payment data: stripe.com/privacy.

Basic usage data. We collect standard server logs (IP address, browser type, pages visited) for security and performance purposes.

3. How We Use Your Data

We use the data we collect only to:

• —Generate your AI portrait
• —Deliver your digital download or arrange print fulfilment
• —Send you order confirmations and shipping updates
• —Respond to support requests
• —Detect and prevent abuse

We do not use your photos or your children's likenesses for advertising, analytics profiling, or any purpose beyond generating your portrait.

4. AI Processing & Model Training

Your photos are processed via the Google Gemini API. We have configured our usage under Google's API terms such that submitted data is not used to train or improve AI models. Google's API data processing terms apply: cloud.google.com/terms/data-processing-addendum.

We do not train, fine-tune, or otherwise use your photos to improve any AI model, whether operated by us or a third party.

5. Data Retention & Deletion

Uploaded photos are deleted from our systems within 24 hours of your session ending, and in all cases within 72 hours of upload. They are not retained after portrait generation is complete.

Generated portrait images are stored for 30 days to allow you to retrieve a paid order. After 30 days they are permanently deleted unless you have an active order in progress.

Email addresses collected for order purposes are retained for as long as necessary to fulfil the order and comply with legal obligations (typically 7 years for financial records). You may request deletion at any time; see Section 8.

6. Who We Share Data With

We share data only with the third-party services necessary to operate:

We do not sell, rent, or share your personal data with any other party.

7. Children's Privacy

Our service is used by parents and guardians, not by children. We do not knowingly collect personal information directly from children under 13. If you are a parent uploading photos of your child, you are our customer and you control the data.

We do not create profiles of children, store children's names linked to photos beyond your active session, or use children's likenesses for any purpose other than generating the portrait you requested.

8. Your Rights

Depending on your location, you may have the right to:

• —Access the personal data we hold about you
• —Request correction or deletion of your data
• —Object to or restrict our processing
• —Receive your data in a portable format
• —Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Cookies

We use only essential cookies required for session management and payment processing. We do not use advertising cookies or third-party tracking pixels.

10. Security

We use HTTPS for all data in transit, access controls on all stored data, and industry-standard practices for our database and storage providers. No system is completely secure; if you have concerns about a specific data matter, contact us.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated version at heirportraits.com/privacy with a revised date. For material changes, we will notify customers by email where we hold an address.