Privacy Policy
Last updated: February 2026
1. Information We Collect
We collect the following information depending on how you interact with Retratte:
Users without an account (free generation):
- Anonymous session identifier (cookie + localStorage)
- Uploaded photographs (processed temporarily)
- Selected artistic style
Registered users:
- Email address
- Name (if you register with Google)
- Portrait and purchase history
2. How We Use Your Information
We use your information exclusively to:
- Generate the artistic portraits you request
- Process payments and deliver downloads
- Allow you to access your purchased portraits
- Limit free tier usage (4 generations per session)
- Improve the Service and resolve technical issues
We do not sell or share your personal information for advertising purposes.
3. Your Photographs
The photos you upload are processed as follows:
- Stored temporarily on secure Supabase servers (South America region)
- Sent to AI services for portrait generation (see section 4)
- Generated portraits are stored for 30 days and then automatically deleted
- Original photos are deleted after generation is complete
We do not use your photos to train artificial intelligence models nor do we share them publicly.
4. Third-Party Services
To provide the Service, we use the following third-party providers:
Supabase (database and storage)
Stores your account data, photos, and portraits. Servers in South America (sa-east-1).
OpenAI (AI description)
Processes a textual description of the subject in your photo. It does not receive the original photo.
Replicate (portrait generation)
Generates the high-resolution (4K) artistic portrait from your photo and selected style. Your photo is securely transmitted and processed temporarily.
Payment providers
Process payments securely. Your payment details (card, etc.) are handled exclusively by the payment provider; we do not have access to that information.
5. Cookies and Local Storage
We use:
- Session cookie: Identifies your session to control the free generation limit (30 days)
- localStorage: Stores the remaining generation counter in your browser
- Authentication cookie: Keeps your session active if you are registered
We do not use third-party cookies for tracking or advertising purposes.
6. Security
We implement industry-standard security measures to protect your information:
- Encrypted connections (HTTPS/TLS)
- Secure authentication with Supabase Auth
- Restricted data access (Row Level Security in database)
- Photo storage in private buckets
7. Your Rights
In accordance with applicable data protection laws, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw your consent for data processing
To exercise any of these rights, write to us at hola@retratte.com.
8. Data Retention
- Original photos: Deleted after generation is complete
- Generated portraits: Available for 30 days from purchase
- Account data: Maintained while your account is active
- Anonymous sessions: Deleted after 30 days of inactivity
9. Children
Retratte is not directed to children under 13. We do not knowingly collect information from minors. If you believe a minor has provided personal data, contact us so we can delete it.
10. Modifications
We may update this Privacy Policy periodically. Changes will be effective upon publication on this page. We recommend reviewing it regularly.
11. Contact
If you have questions about this Privacy Policy or about how your data is processed, write to us at hola@retratte.com.