Privacy Policy

Account Information

• Email address (for account creation and communication)
• Authentication data (when using Google or Discord login)
• Account preferences and settings

Photos and Content

• Training photos you upload to create your AI model
• Generated portrait images created by our AI
• Image metadata (resolution, format, creation date)

Usage and Technical Data

• Service usage patterns and feature interactions
• IP address and browser information (for security)
• Credit usage and billing history
• Training job status and generation requests

Core Service Delivery

• AI Model Training: Your photos are used exclusively to train your personalized AI model
• Portrait Generation: Your trained model creates portraits in the styles you choose
• Account Management: Managing your credits, subscriptions, and service access

Service Improvement

• Analyzing usage patterns to improve our AI models and user experience
• Monitoring service performance and reliability
• Developing new features based on user needs

Communication

• Account-related notifications (training completion, billing updates)
• Customer support and technical assistance
• Important service announcements (with opt-out available for marketing)

Infrastructure Partners

• Supabase: Secure database hosting with enterprise-grade encryption
• Replicate: AI model training and inference with SOC 2 compliance
• Vercel Blob: Secure image storage with global CDN
• Stripe: PCI-compliant payment processing (we never store payment details)

Security Measures

• End-to-end encryption for data transmission
• Encrypted storage of all photos and generated images
• Regular security audits and updates
• Access controls and authentication requirements
• Monitoring for unauthorized access attempts

Limited Data Sharing

We only share data with trusted service providers who help us operate Avatune:

• Replicate: Processes your photos for AI training (under strict data protection agreements)
• Stripe: Handles payment processing (receives only necessary billing information)
• Email Service: Sends account notifications (receives only email addresses)

Legal Requirements

We may disclose information only when required by law, court order, or to protect our rights and users' safety.

Self-Service Data Control

You have complete control over your data directly from your dashboard—no support tickets required:

• Generated Images: Delete individual images or clear your entire gallery
• AI Models: Delete individual models or clear all models at once
• Training Photos: Automatically deleted after model training completes

These actions are immediate and permanent. No waiting, no support requests needed.

Account Record Retention

Your account record (email address and billing history) is retained to prevent abuse of our free tier and comply with financial regulations. Retention periods:

• Billing Records: 7 years (legal requirement)
• Account Email: Retained unless deletion requested
• Personal Content: Under your control, delete anytime

Full Account Deletion (GDPR/CCPA)

EU and California residents have the right to request complete account deletion. Contact support@avatune.ai to exercise this right. We will delete your personal data and anonymize your email within 30 days, retaining only legally required billing records.

Automatic Cleanup

• Training photos are automatically deleted after successful model creation
• Failed training attempts are cleaned up within 24 hours
• Temporary processing files are deleted immediately after use

Access and Control

• View Your Data: Access all your personal information through your account dashboard
• Download Images: Export your generated portraits in high resolution
• Delete Content: Remove generated images and trained models anytime
• Account Settings: Update preferences and privacy controls

Communication Preferences

• Opt out of marketing emails (account notifications will continue)
• Choose notification frequency and types
• Update contact preferences anytime

Regional Rights

If you're in the EU, UK, or other regions with specific privacy laws, you may have additional rights. Contact us to exercise these rights or learn more.

Essential Cookies

We use necessary cookies for authentication, security, and basic functionality. These cannot be disabled.

Analytics

We use Umami Analytics, a privacy-focused, GDPR-compliant analytics service that tracks pageviews and usage patterns without collecting personal information or using cookies for tracking. This helps us understand how users interact with Avatune and improve the service.