Privacy Policy
This Privacy Policy explains what information LumiPortrait ("we", "us") collects when you use lumiportrait.com (the "Service"), how we use it, and your rights. By using the Service, you agree to the practices described here.
1. Information We Collect
- Photos you upload. The image you submit for portrait generation is sent to our processing server, used to generate your six portraits, and then discarded. We do not save it to disk, archive it, or associate it with a profile.
- Contact form data. If you fill out the contact form, your name, email address, and message are transmitted via Brevo to our support inbox so we can reply. We do not add you to any marketing list.
- Anonymous usage data. We store an opaque random visitor cookie (no name, no email) to count daily unique visitors and aggregate funnel events (e.g. "upload started", "processing completed") in counts only — never individual user histories.
- Analytics. We use Google Analytics (G-N101QJ24X2) to understand traffic patterns. Google may set its own cookies subject to its privacy policy.
2. What We Do Not Do
- We do not store your uploaded photos beyond the moments required to generate your portraits.
- We do not run face recognition, identity matching, or biometric profiling on your image.
- We do not use your photos to train AI models.
- We do not sell, rent, or share your personal data with third parties for advertising.
3. How We Use Information
We use the information above strictly to operate the Service: generate your portraits, respond to your messages, prevent abuse, and improve the product based on aggregate metrics.
4. Cookies
We use a small number of cookies: an HTTP-only session cookie (admin login only), a random visitor cookie used for daily-uniques and funnel deduplication, and any cookies set by Google Analytics. You can clear or block cookies in your browser at any time; the core upload-and-generate flow will still work.
5. Data Retention
- Uploaded photos: discarded immediately after generation.
- Generated portraits: streamed to your browser and never persisted on our side.
- Contact form messages: kept in our Brevo inbox until we delete them.
- Aggregate analytics and funnel counts: retained indefinitely (no personal identifiers).
- Visitor cookie records: pruned after 90 days.
6. Your Rights
If you are in the EEA, UK, or California you have the right to request access to, correction of, or deletion of any personal data we hold about you. Because we don't link uploads or anonymous usage data to identifying information, the practical scope is usually limited to anything you sent via the contact form. To exercise any right, email contact@lumiportrait.com.
7. Children
LumiPortrait is not directed at children under 13 and we do not knowingly collect data from them.
8. Security
Traffic is served over HTTPS with HSTS. Admin access is password-protected and session-cookie based. We apply standard browser security headers (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy).
9. Changes
We may update this Policy. Material changes will be reflected by updating the "Last updated" date above.
10. Contact
Questions about this Policy: contact@lumiportrait.com.