Privacy Policy

1. Scope

This policy applies when you visit AI Engagement Photos, create an account, purchase credits or subscriptions, upload reference photos, generate portraits, or contact support.

AI Engagement Photos is the service name. In this policy, “we”, “us”, and “our” refer to the operator of the service.

2. Information we collect

• Account information such as your name, email address, encrypted authentication data, account role, and credit balance.
• Two reference photos you choose to upload, your selected style, optional instructions, and the portraits created from those inputs.
• Purchase records such as product, amount, currency, payment status, and provider transaction identifiers. We do not store full payment card details.
• Technical records such as IP address, browser information, timestamps, request status, and security or error logs.
• Messages and references you submit through customer support.

3. How we use information

• Authenticate accounts and protect the service from unauthorized use.
• Upload both reference photos, build the selected portrait request, deliver the result, and maintain generation history.
• Process purchases, issue credits, grant the one-time email-verified preview, handle refunds, and maintain an auditable credit ledger.
• Send verification, password reset, purchase, service, and support emails.
• Diagnose failures, return credits when a generation fails, enforce our terms, and improve reliability.

4. Service providers and international processing

We share only the information needed to operate the service. Providers may process data in countries other than your own under their own security and privacy commitments.

• Kie.ai and its configured GPT Image 2 service receive the two reference images and our generated prompt to create the requested portrait.
• Cloudflare R2 stores uploaded reference images and generated portraits.
• PostgreSQL hosting stores accounts, purchases, credit ledger entries, and generation history.
• Waffo Pancake processes checkout, subscription, refund, and payment events.
• Resend sends transactional and support email. Vercel hosts and delivers the application.

5. Photo permission and face data

You must have permission from both people shown in the uploaded photos. Do not upload images of minors, strangers, public figures, or anyone who has not agreed to this use.

The service uses visible facial features only to generate the requested portrait. We do not build face-recognition profiles or use uploaded photos to train our own models. Third-party AI processing remains subject to the provider’s terms and retention practices.

6. Retention and deletion

Reference uploads and generated portraits are retained only as long as reasonably necessary to provide access, support retries, maintain history, and protect the service. You may request deletion through the contact page.

Deletion from our active systems may not immediately remove encrypted backups or copies already being processed by a provider. Payment, fraud-prevention, and credit-ledger records may be retained where required for accounting, legal obligations, disputes, or service integrity.

7. Your choices and rights

• Request access to, correction of, or deletion of personal information we control.
• Withdraw optional marketing consent or unsubscribe from newsletter email.
• Request account closure and deletion of associated reference photos and generated portraits.
• Object to or restrict processing where applicable law provides that right.

8. Security, age, and policy changes

We use access controls, encrypted transport, signed authentication, and restricted service credentials. No online system can guarantee absolute security, so use a unique password and contact us if you suspect unauthorized access.

The service is for adults aged 18 or older. We may update this policy when providers, features, or legal requirements change. Material changes will be dated on this page.