Privacy Policy

1. Introduction

PicLoreAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI headshot generation service. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Photos: Images you upload for AI model training and headshot generation
• Payment Information: Billing details processed securely through our payment provider (we do not store full credit card numbers)
• Communications: Information you provide when contacting us for support

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, generation history
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Photos

Your photos are central to our service, and we take their handling seriously:

• Model Training: Your uploaded photos are used to train a personalized AI model specifically for you
• Image Generation: Your trained model is used to generate headshots based on your requests
• No Third-Party Training: We do NOT use your photos to train general AI models or share them with other users
• Processing: Photos are processed using AI services from Google (Gemini) and OpenAI under their respective privacy policies

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Encryption: Data is encrypted in transit (HTTPS) and at rest
• Secure Storage: Photos and generated images are stored on secure cloud infrastructure (AWS S3/Cloudflare R2)
• Access Controls: Only you can access your photos and generated images through your account
• Database Security: User data is stored in secure PostgreSQL databases with encryption

5. Data Retention

We retain your data as follows:

• Account Data: Retained while your account is active and for a reasonable period after deletion
• Uploaded Photos: Retained while your AI model exists; you can delete your model at any time
• Generated Images: Retained in your gallery until you delete them or close your account
• Payment Records: Retained as required by law for accounting purposes

6. Third-Party Services

We use the following third-party services to provide our platform:

• Google (Gemini AI): For AI image generation
• OpenAI: For AI image generation
• AWS/Cloudflare: For secure image storage
• Payment Processor: For secure payment handling
• Vercel: For hosting and analytics

These services have their own privacy policies, and we encourage you to review them. We only share the minimum data necessary to provide the Service.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Withdrawal: Withdraw consent for data processing where applicable
• Account Deletion: Delete your entire account and associated data

To exercise these rights, please contact us at harshrawat.dev@gmail.com.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings (e.g., dark mode)
• Analytics: Understand how users interact with our Service (Vercel Analytics)

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Service functionality.

9. Children's Privacy

PicLoreAI is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law. We will provide information about the breach and steps you can take to protect yourself.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: