Privacy Policy

Last updated 2026-09-05. This policy explains what First Spark Studios collects when you use PortraitPop and why.

What we collect

• Account data: email, name, password hash.
• Content you upload: photos or text you submit to generate results. Uploads are processed by AI providers on our behalf and deleted from our storage within 24 hours unless you save results to your account.
• Payment data: handled by Stripe. We never see your full card number.
• Usage and device data: pages viewed, events, approximate location, browser, via PostHog and, where enabled, the Meta and TikTok pixels and their server-side APIs (hashed email only).

How we use it

To run the Service, process payments, send transactional email, prevent abuse, measure and improve the product, and measure advertising.

Sharing

Processors we rely on: Vercel (hosting), Neon (database), Stripe (payments), Resend (email), PostHog (analytics), Cloudflare (storage), Anthropic and fal.ai (AI processing), Meta and TikTok (advertising measurement). We do not sell personal data.

Your rights

You can access, correct, export, or delete your data by emailing hello@portraitpop.app. EU/UK residents have GDPR rights; California residents have CCPA rights, including to opt out of the sale/sharing of data for advertising by disabling cookies.

Cookies

We use essential cookies for sign-in and, where you consent, analytics and advertising cookies.

Retention

Account data is kept while your account exists. Uploads: 24 hours. Generated results you save: until you delete them. Payment records: as required by law.

Children

The Service is not for anyone under 18.

Contact

hello@portraitpop.app