PRIVACY POLICY
Last Updated: March 2026
This Privacy Policy explains how MagicPortrait processes personal data in connection with the Service.
For purposes of the General Data Protection Regulation (GDPR), we are the data controller of your personal data.
Information We Collect
We collect information you provide directly, including name, email address, login credentials, shipping details, communications, and uploaded photos. Payment data is processed by secure third-party processors and we do not store full card numbers.
We collect usage and technical data such as IP address, browser type, device information, generation activity, and interaction data.
How We Use Data
We process personal data under Article 6(1)(b) GDPR to perform our contract with you, under Article 6(1)(f) GDPR for legitimate interests such as fraud prevention and service improvement, under Article 6(1)(a) GDPR where consent is required for marketing, and under Article 6(1)(c) GDPR to comply with legal obligations.
We use data to operate the Service, generate artwork, process payments, fulfill orders, provide support, improve system performance, and comply with law.
Cookies and Similar Technologies
We use essential cookies and similar storage technologies to keep guest masterpieces available across visits, preserve guest generation limits, maintain secure sessions, and help protect the Service against abuse. These cookies are necessary for the core functionality requested by the user and are not used for advertising or cross-site tracking.
If you clear your browser cookies or other site storage before creating an account, you may lose access to saved guest masterpieces and guest-session recovery features.
AI and Uploaded Images
Uploaded photos are processed solely to generate requested artwork. They are not used to train or fine-tune AI models. Images are retained only as long as necessary to deliver the Service and are automatically deleted within 31 days unless required for an active order or legal obligation.
Aggregated and anonymized technical data may be used to improve system performance.
Data Sharing
We do not sell personal data.
We share data only with service providers necessary to operate the Service, including payment processors, hosting providers, analytics providers, and shipping partners, under contractual safeguards.
International Transfers
Where personal data is transferred outside the European Economic Area, including to the United States, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
Data Retention
Account data is retained while your account remains active and thereafter as required for legal compliance. Transaction records are retained as required by accounting and tax laws.
Your Rights
Depending on your location, you may have the right to access, rectify, erase, restrict, object to processing, and request portability of your data. You may also lodge a complaint with your local supervisory authority.
California and certain U.S. state residents may have rights to access, correct, or delete personal information and to non-discrimination.
Requests may be sent to info@magicportrait.app.
Data Security
We implement reasonable technical and organizational measures including encryption, access controls, and monitoring. No system can guarantee absolute security.
Children
The Service is not directed to children under 13 or the minimum legal age in your jurisdiction. We do not knowingly collect data from children without authorization.
Changes
We may update this Policy periodically. Continued use of the Service after updates constitutes acknowledgment of the revised Policy.
Contact
MagicPortrait
Email: info@magicportrait.app
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
