Privacy Policy

Controller

[Titular pendiente de designar] (GTlized). Contact: [contact email pending].

Your photo gets deleted: how it works

The photo you upload is used exclusively to generate your portrait. It is processed in memory, stored encrypted temporarily for at most 1 hour (the window to buy the pack) and deleted automatically. If you buy the pack, it is deleted as soon as generation finishes. There are no user accounts and no history: we do not keep your face. Your newsletter email, if you subscribe, is separate, optional data you can delete anytime.

What data we process

• Your photo (may contain biometric data): only to generate the image; deleted within 1 hour. Legal basis: your explicit consent.
• Generated images: available via a private link for 7 days, then deleted.
• Hashed IP and a random device identifier: to enforce the free limit and prevent abuse, kept 30 days. Legitimate interest.
• Payment data: handled by Paddle, our Merchant of Record; we never see your card.
• Cookieless analytics (Umami): aggregated page views and events, without identifying you.
• Your email (only if you subscribe to the newsletter): to send you updates. Legal basis: your consent. Kept until you unsubscribe (link in every email); unsubscribing deletes it.

Processors and transfers

We rely on: Google (Gemini API, processes your photo to generate the image), Vercel (hosting and temporary storage), Upstash (temporary storage), Paddle (payments), Resend (newsletter email delivery, only if you subscribe) and Umami (analytics). Some providers are outside the EEA; transfers rely on the EU-US Data Privacy Framework and standard contractual clauses. We do not use your photo to train models.

Your rights

You can exercise access, rectification, erasure, objection, restriction and portability by writing to [contact email pending]. You may also complain to your data protection authority. Note the photo will already have deleted itself within 1 hour.

Minors

This service is for adults (18+) only.