Privacy Policy

Last updated: December 1, 2025

1. Introduction

Christmas Portrait Studio ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and authentication credentials
  • Photos: Images you upload to generate Christmas portraits
  • Payment Information: Processed securely through Stripe (we do not store credit card details)
  • Communications: Messages you send to our support team

2.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent on the Service
  • Device Information: Browser type, operating system, IP address
  • Cookies: We use cookies to maintain your session and improve user experience

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Generate AI-powered Christmas portraits from your photos
  • Process payments and manage your credits
  • Send you important updates about the Service
  • Respond to your support requests
  • Improve and optimize the Service
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Data Storage and Security

Photo Storage: Uploaded photos are temporarily stored for processing and are automatically deleted after 30 days. Generated portraits are stored in your account until you delete them.

Security Measures: We implement industry-standard security measures including encryption, secure servers, and access controls to protect your data.

Third-Party Services: We use trusted third-party services (Fal.ai for AI processing, Stripe for payments, Resend for emails) that have their own privacy policies and security measures.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers: Third-party companies that help us operate the Service (AI processing, payment processing, email delivery)
  • Legal Requirements: When required by law, court order, or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Opt-Out: Unsubscribe from marketing emails (service emails are required)
  • Data Portability: Request your data in a machine-readable format

To exercise these rights, contact us at [email protected]

7. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

10. Contact Us

For questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]