Privacy Policy

1. Information we collect

• Photographs: the people and dogs you upload when creating a portrait.
• Artwork choices: the motif, colour treatment, size, display and edition you select.
• Generated content: the personalised artwork versions returned to your browser.
• Studio-session email: the email address you verify before generating. It is sent to our transactional email provider to deliver a verification code. We store a one-way hash to manage your session and included previews.
• Order and contact details: information you provide if you contact us or place an order when checkout is available.
• Technical data: standard server information such as IP address, browser type and request timestamps.
• Optional analytics: visits, page paths, device information and non-sensitive portrait-funnel events if you accept analytics.

2. How we use your information

• Create the personalised portrait versions you request.
• Manage your studio session and prevent repeated use of the included generation credits.
• Prepare, fulfil and support an order.
• Respond to questions and service requests.
• Protect the service from abuse and maintain its reliability.
• Understand how visitors find and use the service, and improve the portrait-creation journey, when analytics consent is granted.
• Meet legal, accounting and regulatory obligations.

3. Photograph and AI processing

Your photographs are sent to the OpenAI Images API only after you choose to create an artwork version. They are used together with your selected composition and style to create the requested image. OpenAI states that API data is not used to train its models unless the account holder explicitly opts in. API inputs and outputs may be retained in abuse-monitoring logs for up to 30 days, unless a longer period is required by law.

Please upload a photograph of another person only when you have their permission and the right to use it for this purpose.

4. Storage and retention

Connected Portraits does not retain your uploaded source photographs on its application server after the generation request completes. We privately store the clean generated artwork master so the exact version you select can later be prepared for print; only a watermarked copy is returned to your browser. Abandoned masters may be deleted after 30 days, while selected or ordered masters may be retained for fulfilment, support and legal obligations. Your browser also stores the selected photographs and watermarked versions locally so you can refine them and return after a page refresh. This device-local data remains until it is replaced or you clear the site’s browser data. We retain a one-way hash of the studio-session email with its remaining credit balance. Verification records contain a keyed code digest, expiry and retry counters; expired records are removed after their one-hour rate-limit window on subsequent verification requests. The raw code is not stored in our application database. Hosting security logs may be kept for a limited period.

5. Legal basis

We process information to provide the service or fulfil a contract you request, based on your consent where required, and for legitimate interests such as security and service reliability. Some records are retained to comply with legal obligations.

6. Service providers and international transfers

We use service providers for AI image generation, website hosting and, when enabled, order fulfilment, payment processing, Resend for verification emails and Google Analytics. This may involve processing outside Switzerland or the EEA. Providers are selected with appropriate contractual and technical safeguards for the data they handle.

7. Cookies and local storage

The site does not use advertising storage. Google Analytics starts with analytics storage denied and is granted only if you choose “Accept analytics.” You can withdraw or change that choice at any time through the “Privacy choices” control shown on the site. We do not send uploaded photographs, email addresses or typed content to Google Analytics. An essential, signed studio-session cookie connects the browser to its credit balance, and browser storage keeps selected photographs and artwork versions available inside the portrait studio.

8. Your rights

Depending on where you live, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing. You may also withdraw consent for future processing and lodge a complaint with your local data-protection authority.

9. Security and children

We use HTTPS, access controls and limited retention to protect submitted data. No online service is completely risk-free. The service is not directed to children under 13, and a parent or guardian should supervise any submission involving a minor.

10. Changes and contact

We may update this policy as the service changes. The effective date above will show the latest revision. Privacy questions and rights requests can be sent to contact@terrain3dprint.com.