Privacy Policy

This policy covers portraittogether.com: uploading photos, making and buying a portrait, giving it as a gift, and receiving one. It is written to be read, not filed. If something here is unclear, write to support@portraittogether.com and we will explain it.

Who is responsible

Portrait Together (portraittogether.com) is the data controller for the personal data described here. Privacy contact: support@portraittogether.com. Legal notices: legal@portraittogether.com.

What we collect

Your email address. You give it to us to get your free preview. We use it to send your previews, receipt and portraits, to sign you in to My portraits, and to keep your orders together under one account. There is no password: you sign in with a one-time link we email you.

Your photos. The photos of you, other people and your pets that you upload to make a portrait. Before a photo leaves your device, your browser shrinks it and removes hidden data such as GPS location and camera details.

Order details. The looks you choose, your pet's name if you give one, redo notes, and the previews and portraits we make for you, including every redo.

Gift details. Your gift note and the name you sign it with, the recipients' email addresses if you schedule delivery, the time and time zone you choose, and whether and when the gift page was opened.

Purchase records. The order number, what was bought, the amount, the currency, the date, the payment status, any refund, and the payment record our merchant of record returns to us. Card numbers and bank details never reach our servers — they go directly to the merchant of record.

Free-preview and abuse checks. To keep the free preview fair, we keep a normalised form of your email address, a salted hash of your IP address, and a device identifier your browser generates. The email step is protected by Cloudflare Turnstile, an invisible check that tells people and bots apart.

Ad parameters. If you arrive from an ad or a campaign link, we keep the campaign parameters in the link (such as utm_source and Meta's fbclid) in your browser's local storage for 30 days, and save them with your order when you start one, so we can tell which ads work.

Moderation records. The outcome of every automated check on your photos, on finished portraits and on the text you write, and any decision a person makes when reviewing it.

Help requests. What you send through Need help? or to our mailboxes, and our replies.

Usage and device data. Server logs generated by our hosting provider (IP address, URL, response code, timestamp, user agent, referrer), and product events such as which step of the order was completed, tied to a random identifier. Order and gift links contain private tokens; we remove those tokens before anything is recorded.

How we use your photos

• Your photos are used only to make your portraits: they are checked, then sent with the written instructions for your chosen look to the image model that makes the portrait.
• Automatic photo checks. Each photo is checked by GPT-6 Luna by OpenAI (through OpenRouter) for a clear subject, sharpness and whether a person appears to be under 18, and by an automated image safety check for content we cannot accept. These checks give a yes or no for that photo; they do not identify anyone.
• No biometrics. We do not create face templates, face geometry or any other biometric identifiers, we do not compare faces against any database, and we do not use your photos to recognise anyone.
• Image models. Portraits are made with GPT Image 2.5 Sunburst by OpenAI; if it is busy or fails, with GPT Image 2 by OpenAI, and as a last resort Nano Banana 2.1 by Google. Print files are enlarged with SeedVR by ByteDance Seed. These models run on fal.ai, which passes your photos to the model's provider only to make your portrait. See How your portrait is made.
• Private storage. Uploads, previews and portraits are kept in private storage and shown to you only through short-lived links: previews for 1 hour, originals and print files for 24 hours, renewed when you open your order page.
• Who else sees them. When we look into a help request, a refund or a problem with your order, our support team can see your watermarked previews. They do not see the photos you upload.
• Nothing public. Your photos and portraits never appear in a public gallery, and we never use them in our marketing without your separate written permission.

Why we use your data, and the legal basis

• Making and delivering your portraits — photo checks, previews, the portraits you buy, print files, redos, the gift page and scheduled delivery. Legal basis: performance of a contract.
• Taking payment, refunds and preventing fraud, including abuse of the free preview. Legal basis: performance of a contract; legitimate interests.
• Moderating photos, portraits and text under our Acceptable Use Policy. Legal basis: legitimate interests in running a safe, lawful service; legal obligation where content is illegal.
• Answering help requests. Legal basis: performance of a contract.
• Security and availability — rate limiting, bot checks, abuse detection, logs. Legal basis: legitimate interests.
• Measuring our ads and improving the product through analytics and the Meta pixel. Legal basis: legitimate interests; consent where the law requires it.
• Service email — sign-in links, "your previews are ready", receipts, "your print file is ready", gift notices. Legal basis: performance of a contract.
• Reminder and holiday emails, only if you opted in. Legal basis: consent.
• Tax and accounting records. Legal basis: legal obligation.

We do not sell your personal data, and we do not use it for automated decisions that produce legal effects for you.

Emails we send

Service emails are part of the service and do not need your consent: sign-in links, "your previews are ready", your receipt, "your print file is ready", redo notices, gift notices and answers to help requests.

Reminder emails — for example a note that your previews are still waiting, or a reminder before a holiday — are sent only if you tick the box to receive them when you enter your email. The box is never ticked for you, and you can use the service without ticking it. Every one of these emails has an unsubscribe link. We do not send them while a help request of yours is still open. Gift recipients never receive marketing email.

Subprocessors

We use the following service providers. Each receives only what it needs for its job.

• Cloudflare (hosting, Workers, D1 database, R2 private storage) — everything the service stores or serves, including your photos and portraits in a private R2 bucket.
• Cloudflare Turnstile (bot check on the email step) — information about your browser and device and how the check runs. Cloudflare processes it under the Cloudflare Turnstile Privacy Addendum.
• fal.ai (image generation, enlarging and image safety checks) — your photos, the instructions for your look and the finished images, to run the models listed in the terms.
• OpenAI (image models and photo checks) — your photos and look instructions, received through fal.ai to make your portrait, and through OpenRouter to check your photos.
• Google (back-up image model) — your photos and look instructions, received through fal.ai, only if the OpenAI models cannot make a portrait.
• OpenRouter (routing for photo checks) — passes each photo check to OpenAI and returns the result.
• Waffo — Waffo Pancake, our merchant of record for payments, receives the details you enter at checkout directly (card numbers never reach our servers), acts as the reseller of the service to you and handles tax and invoicing; its buyer terms and privacy notice also apply to your purchase. Waffo Prompt Sift receives only the text being checked (such as a redo note), to decide whether it is allowed.
• Resend (email) — the recipient's email address and the message content, for every email we send.
• Meta (ad measurement) — on our public pages only (never on order pages, gift pages, My portraits or the find-my-order page), the Meta pixel records page views and sets Meta's _fbp cookie. From our servers we tell Meta when previews are ready, when checkout starts and when a purchase is made, with a hashed order reference, the ad identifiers saved with your order, and, for purchases only, a SHA-256 hash of your email address. We never send Meta your photos, portraits or plain-text email address.
• Plausible Analytics (website analytics, self-hosted by us) — counts page visits in aggregate without cookies and without storing your IP address. We do not record sessions or replay screens.

We also disclose data where the law requires it, to respond to a lawful request from a public authority, to protect a child's safety, or to establish or defend a legal claim.

International transfers

Our providers operate in the European Economic Area, the United Kingdom and the United States, and model providers may process the photos a step needs outside the EEA, the UK and the US. Where personal data moves out of the EEA or the UK, the transfer is covered by the European Commission's Standard Contractual Clauses (and the UK Addendum), or by an adequacy decision.

Cookies and similar storage

• A session cookie, only if you sign in to My portraits.
• A random analytics identifier for our own product events.
• On public pages, Meta's _fbp cookie (and _fbc if you arrived from a Meta ad), used to measure our ads. You can turn these off with Cookie settings at the bottom of any page: we then tell the pixel to stop, and orders you start afterwards are not reported to Meta.
• Local storage in your browser for ad parameters (30 days) and for an order you have not finished.

How long we keep it

• Original uploaded photos — deleted automatically 30 days after your order is completed, or 30 days after upload if you don't buy.
• Previews you did not buy — deleted 30 days after they were made.
• Portraits you bought, their print files and gift pages — kept for as long as we operate the service, so you can download them again and the gift page keeps working, unless you ask us to delete them.
• Recipients' email addresses — used only for that delivery, and kept with the gift so you can see where it went.
• Account data and free-preview checks — kept while the account exists.
• Orders, payment and refund records — kept for at least 7 years, because tax and accounting law requires it.
• Server logs — up to 7 days.
• Help requests and support email — 2 years after the conversation ends.
• Marketing consent records — kept while you are subscribed and for 2 years after you unsubscribe, as proof of consent.
• Moderation records — kept while they may be needed for appeals and for compliance reviews by our payment partner.

Deleting your data

Email support@portraittogether.com from the address you ordered with and ask us to delete your data. We delete your photos, previews, portraits, gift notes and recipients' addresses within 30 days and confirm when it is done. Your gift pages stop working when we do this. Orders, payment and refund records are kept for the accounting period above.

File metadata

Every portrait file you download includes embedded IPTC metadata stating that it was made with AI. This metadata does not include your name, email address or location.

Security

All traffic is encrypted with TLS. There are no customer passwords to steal: sign-in links expire after 15 minutes and are stored only as hashes. Photos and portraits live in private storage and are served only through short-lived signed links. Order and gift links are long random tokens and are kept out of search engines and analytics. No system is perfectly secure; if a breach is likely to put your rights at risk we will notify the competent authority within 72 hours and tell you directly where the law requires it. To report a vulnerability, write to legal@portraittogether.com.

Children

Portrait Together is only for adults aged 18 and over, and it does not accept photos of anyone under 18. Photos that appear to show a child are blocked by an automatic check. If we learn that we have received a photo or personal information of a child under 18, we delete it. Parents and guardians can write to support@portraittogether.com at any time.

Your rights

Wherever you are, you can ask to access, correct, delete or export your personal data, object to processing based on legitimate interests, and withdraw consent. If you live in a US state with a privacy law (including California under the CCPA / CPRA) or in the EEA or the UK under the GDPR, you also have the right not to be discriminated against for using these rights and the right to complain to your data protection authority. Email support@portraittogether.com from the address you used with us; we answer within 30 days and do not charge for this.

If you schedule a gift, we email it to up to 3 addresses you give us. If you received a gift and want your details removed, email support@portraittogether.com.

Changes to this policy

We may update this policy. Material changes are reflected in the date at the top of this page and, where appropriate, announced through the service.

Contact

• Privacy questions, data requests, parents and guardians: support@portraittogether.com
• Legal notices, security reports and copyright complaints: legal@portraittogether.com