PRIVACY POLICY
Last Updated: May 2026
This Privacy Policy explains how MagicPortrait processes personal data in connection with the Service.
For purposes of the General Data Protection Regulation (GDPR), we are the data controller of your personal data.
Information We Collect
We collect information you provide directly, including name, email address, login credentials, shipping details, communications, and uploaded photos. Payment data is processed by secure third-party processors and we do not store full card numbers.
We collect usage and technical data such as IP address, browser type, device information, generation activity, interaction data, cookie identifiers, and advertising click identifiers where permitted.
How We Use Data
We process personal data under Article 6(1)(b) GDPR to perform our contract with you, under Article 6(1)(f) GDPR for legitimate interests such as fraud prevention and service improvement, under Article 6(1)(a) GDPR where consent is required for marketing, and under Article 6(1)(c) GDPR to comply with legal obligations.
We use data to operate the Service, generate artwork, process payments, fulfill orders, provide support, improve system performance, measure advertising, show relevant offers, and comply with law.
Cookies and Similar Technologies
We use essential cookies and similar storage technologies to keep guest masterpieces available across visits, preserve guest generation limits, maintain secure sessions, process checkout, and help protect the Service against abuse. These are required for the core functionality requested by the user.
With your consent, we also use analytics cookies and similar technologies to understand site performance and improve the Service. These may include Firebase Analytics, Vercel Analytics, Vercel Speed Insights, and Microsoft Clarity, depending on the page and configuration.
With your consent, we use marketing cookies and advertising technologies such as Meta Pixel and Meta Conversions API to measure ad performance, attribute purchases, create or update advertising audiences, and show relevant ads on Meta platforms. These technologies may use identifiers such as _fbp, _fbc, fbclid, hashed email address, user ID, IP address, user agent, page URL, and event details.
If you are signed in when you make or update a cookie choice, we may store that preference with your account ID and email address so we can honor your choices and keep a consent record. You can accept all cookies, reject non-essential cookies, or manage analytics and marketing choices from the cookie banner or the Cookie Settings link in the footer. If you clear your browser cookies or other site storage before creating an account, you may lose access to saved guest masterpieces and guest-session recovery features.
AI and Uploaded Images
Uploaded photos are processed solely to generate requested artwork. They are not used to train or fine-tune AI models. Images are retained only as long as necessary to deliver the Service and are automatically deleted within 31 days unless required for an active order or legal obligation.
Aggregated and anonymized technical data may be used to improve system performance.
Data Sharing
We do not sell personal data for money. Some advertising disclosures may be considered "sharing" or "targeted advertising" under certain privacy laws, and you can opt out by rejecting marketing cookies.
We share data only with service providers necessary to operate, improve, measure, and market the Service, including payment processors, hosting providers, analytics providers, advertising platforms, and shipping partners, under contractual safeguards where required.
International Transfers
Where personal data is transferred outside the European Economic Area, including to the United States, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
Data Retention
Account data is retained while your account remains active and thereafter as required for legal compliance. Transaction records are retained as required by accounting and tax laws.
Your Rights
Depending on your location, you may have the right to access, rectify, erase, restrict, object to processing, and request portability of your data. You may also lodge a complaint with your local supervisory authority.
California and certain U.S. state residents may have rights to access, correct, or delete personal information and to non-discrimination.
Requests may be sent to info@magicportrait.app.
Data Security
We implement reasonable technical and organizational measures including encryption, access controls, and monitoring. No system can guarantee absolute security.
Children
The Service is not directed to children under 13 or the minimum legal age in your jurisdiction. We do not knowingly collect data from children without authorization.
Changes
We may update this Policy periodically. Continued use of the Service after updates constitutes acknowledgment of the revised Policy.
Contact
MagicPortrait
Email: info@magicportrait.app
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
