Privacy Policy

Xenco Labs operates ImageCrafter at imagecrafter.app. This page says what we collect, who else touches it, and how to get rid of it. It is written to be read, not to be survived.

What we collect

• The photo you upload, and the portrait generated from it.
• Your email address — so we can send you the portrait, the receipt and the download link.
• Account details if you create one: name and email, held by our sign-in provider. We never see or store your password.
• Order details if you buy: what you bought, the amount, and — for prints — the shipping address you give us.
• Usage data: pages viewed, portraits generated, approximate location from your IP address, browser and device type.

We do not collect your card number. Stripe does, on their own systems.

What we do with your photo

We send it to an AI model, which reads it in order to paint a portrait from it. That analysis includes facial characteristics — it has to, or the portrait would not look like the subject. The result is a written description used to steer the generator; we do not build or keep a biometric template, and we do not use it to identify you anywhere else.

We do not use your photo to train AI models — not ours, and our providers are contractually barred from training on it either. We do not sell your photo or your email address to anyone.

Free previews and the public gallery

Portraits generated for free and not purchased may be shown publicly as examples of the work — see our terms for the licence you grant. Buying the portrait ends that licence and removes it from the gallery.

We publish only what we have picked by hand. We never publish your original photograph, your name or your email address. If you want a free preview taken down, email hello@imagecrafter.app and we will remove it.

Who else processes your data

We run on other people’s infrastructure. Each of these sees only the part it needs:

• Vercel — hosting and delivery of this website.
• Neon — the database holding orders and portrait records.
• Cloudflare R2 — storage for uploaded photos and generated portraits.
• Clerk — accounts and sign-in.
• Stripe — payments, and card data we never see.
• Anthropic — reads the uploaded photo to describe it.
• Replicate, Higgsfield and Kling — generate the portrait from that description and your photo.
• Prodigi — prints and ships physical orders, receives your shipping address.
• Brevo — sends our transactional email.
• Mautic — our own marketing-email system, holds your email address if you sign up for updates.

Cookies and tracking

We use Google Analytics and Ahrefs Analytics to understand traffic, and Meta and TikTok advertising pixels to measure whether our ads work. These set cookies and report page views and purchases back to those companies. We also send Meta and TikTok a hashed version of your email address on purchase so they can match the conversion — hashed, never in the clear.

A browser-level “Do Not Track” or tracker-blocking extension will stop most of this. We do not serve behavioural ads on this site itself.

How long we keep things

Uploaded photos and generated portraits are kept while your portrait is live so you can come back to it, and so we can honour a purchase or a reprint. Order records are kept for as long as tax and accounting law requires. Ask us to delete your data and we will, except where we are legally required to keep a record of the sale.

Your rights

Wherever you are, you can ask us to show you what we hold, correct it, delete it, or stop emailing you. If you are in the UK or EU, that is your right under GDPR; in California, under the CCPA. We do not sell personal information as those laws define it.

To exercise any of this, email hello@imagecrafter.app. We answer within 30 days, usually much sooner.

Children

ImageCrafter is not for people under 18, and we do not knowingly collect their data. Do not upload a photo of a child who is not in your care. If you believe a child’s photo has been uploaded, email us and we will delete it.

Security

Traffic is encrypted in transit. Files live in access-controlled storage, and download links are signed and expire. No system is perfect; if we ever have a breach affecting your data, we will tell you.

Changes

We may update this policy. The effective date at the top changes when we do.

Contact

Privacy questions, deletion requests, anything else: hello@imagecrafter.app, or see our contact page.