What we do with your data.

TL;DR

• Your selfies are deleted 30 days after your most recent purchase.
• Your finished portraits are kept in your account until you ask us to delete them.
• Your face is never used to teach a general-purpose AI model.
• We don't sell your data. Sub-processors we use are listed in §4.
• You can delete your account from your account page or by emailing hello@cabinetportraits.com.

1. What we collect

When you use Cabinet Portraits we collect:

• Account information: email address and display name (via Google sign-in through Firebase).
• The selfies you upload. Stored in Cloudflare R2 object storage, encrypted at rest.
• Generated output: the portraits our pipeline produces for you, also in R2.
• Order and payment metadata: order id, amount, status, and a reference to Lemon Squeezy's session. Card details never touch our servers.
• Technical logs: timestamps, salted IP hashes, progress events from the pipeline. Used only for debugging and abuse prevention.

2. How we use it

Your selfiesare used only to (a) build a per-shoot model of your face that anchors the generator, (b) score generated portraits against that model, and (c) deliver your final set. They are not used to teach a general-purpose AI. They are not shared with advertisers. They are not reused on other customers' shoots.

Your email is used to send transactional notifications (your portraits are ready, refund issued) and, if you opt in, occasional product updates.

Payment metadata is used to process the transaction, issue refunds, and meet tax and accounting requirements.

3. Retention

• Uploaded selfies: deleted 30 days after your most recent purchase. Each new purchase resets that 30-day window.
• Intermediate face-model + candidate images: follow the same 30-day rule.
• Delivered portraits: kept in your account until you delete them. Download anytime.
• Payment records: retained for 7 years, or as required by tax law.

4. Service providers we use

We use a small set of third-party services to run Cabinet Portraits. Each gets only the data it needs and is contractually bound to use that data only to provide its service to us.

• Lemon Squeezy — payment processing (merchant of record). Sees your email and payment details.
• Firebase (Google) — authentication. Stores your email and Google sign-in identifiers.
• Cloudflare R2 — image storage. Selfies and portraits are encrypted at rest.
• Google Gemini API — image generation and identity scoring. Sees your selfies during generation; Google commits not to use Gemini API inputs to improve their general models.
• Anthropic Claude API — secondary scoring. Sees your selfies and portraits during scoring; Anthropic commits not to use API inputs to improve their general models.
• Neon — database. Stores order, user, and job metadata (no image data).
• Upstash Redis — job queue.
• Resend — transactional email.
• Fly.io — background worker hosting.
• Vercel — website + API hosting.
• Sentry — error monitoring.
• PostHog — product analytics. No biometric or selfie data.

5. Your rights

You can at any time:

• Access all data we hold about you — email hello@cabinetportraits.com.
• Delete everything from your account page, or by emailing us. We will delete all personal data within 14 days, excepting payment records which we are legally required to retain.
• Correct inaccurate information.
• Export your portraits at any time from your account.
• Object to any processing you disagree with.

If you're in the EU, UK, or California, you have additional rights under GDPR / CCPA; these apply to you by default under the list above.

6. Biometric data — U.S. state-law notices

The selfies you upload contain your facial geometry, which qualifies as biometric information under certain U.S. state laws — notably the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14), the Texas Capture or Use of Biometric Identifier Act (CUBI), the Washington Biometric Privacy Act (RCW 19.375), and the New York Stop Hacks and Improve Electronic Data Security Act (NY-SHIELD).

Purpose of collection. We collect, store, and process your facial geometry solely to build a per-shoot model that anchors the generator, score portraits for identity match, and deliver your final set. We do not use it for identification, surveillance, employment screening, or any other purpose.

Retention.Selfies and intermediate face-model data are permanently deleted no later than 30 days after your most recent purchase. This satisfies BIPA's requirement that biometric data be destroyed when its initial purpose has been satisfied or within 3 years of last interaction, whichever first occurs.

Disclosure. We do not sell, lease, trade, or otherwise profit from your biometric data. We share it only with the sub-processors in §4, each contractually bound to use it solely to provide their service to us.

Written consent. By checking the consent box at upload time you provide written informed consent to our collection, storage, and 30-day retention of your facial geometry for the purposes above. You may withdraw consent any time by emailing hello@cabinetportraits.com — we will delete your biometric data within 14 days.

If you are a resident of Illinois, Texas, Washington, or another U.S. state with a private right of action under biometric-privacy law, you may have additional rights and remedies. We do not waive any such rights through these terms.

7. Security

We encrypt data at rest (R2) and in transit (TLS everywhere). Presigned upload/download URLs expire within hours. We salt and hash IP addresses rather than storing them plain. No system is 100% secure; we'll notify you promptly if a breach occurs.

8. International transfers

Cabinet Portraits is operated from Israel and our service providers are primarily US-based. By using the service you consent to your data being processed in those jurisdictions.

9. Changes

Material changes will be emailed to registered users. The “Last updated” date above always reflects the current version.

10. Contact

Questions, data-access requests, deletions, complaints:
hello@cabinetportraits.com