Security policy.
How we handle your photos, your account and your payment data — in plain language.
Last updated 1 October 2026
Your photos
- Encrypted in transit — every upload and download happens over HTTPS.
- Used only for generation — your photos go to our AI image provider solely to produce the images you asked for.
- Deleted within 24 hours — original uploads are permanently deleted no later than 24 hours after upload; generated images for guest sessions follow the same schedule.
- Never used for training — we do not train models on your photos, and our provider is contractually prohibited from doing so.
- Never sold — we do not sell, rent or trade your photos or personal data.
Accounts and access
- Accounts are protected by password authentication; Google sign-in is available.
- Access to production systems is limited to the people who operate them.
- Administrative actions are restricted to accounts with admin rights.
Payments
Card details are handled entirely by our payment provider. We do not receive or store full card numbers — we only keep the order and payment records we need for accounting and tax purposes.
Abuse and content safety
Requests are checked against our acceptable use policy before they reach a model, prompts are screened before generation, and generated images are screened before they are shown. Attempts to generate disallowed content are refused and logged.
Reporting a vulnerability
If you find a security problem, email hello@portraze.com with enough detail to reproduce it. Please give us a reasonable window to fix it before any public disclosure, and do not access or keep other people's data while testing. We will acknowledge your report and tell you what we did about it.
What we ask of you
- Use a strong, unique password.
- Download your photos — they are deleted after the retention window.
- Only upload photos of yourself, or of people who have agreed to it.
Related
Privacy Policy · Terms of Service · Acceptable Use Policy · Support