Portrais creates studio-quality headshots from reference photos of you. Doing so means processing photographs of your face — sensitive personal data — so we explain clearly below what we collect, why, who we share it with, how long we keep it, and the rights you have.
Who we are
Portrais is operated by lalec (lalec.ch), a sole proprietorship based in Switzerland, which is the controller of your personal data (“we”, “us”). For any privacy question or request, contact privacy@portrais.com.
The law that applies
We process personal data under the Swiss Federal Act on Data Protection (revFADP). If you are in the European Economic Area or the United Kingdom, the EU/UK GDPR also applies, and its rights and legal bases apply to you in addition to your rights under Swiss law.
What we collect
| Category | What it is | Why |
|---|---|---|
| Account | Your email address, via Google Sign-In. | To create your account, sign you in, and contact you about your order. |
| Reference photos | The photos of your face that you upload — biometric, sensitive personal data. | Only to generate your headshots. Never to build a biometric profile or identify you elsewhere. |
| Generated images | The headshots we produce for you. | To deliver and display your order for download. |
| Order & payment | Your package and payment status. Card details go directly to Stripe — we never see or store your card number. | To process your purchase and handle support and refunds. |
| Usage & device | Analytics events, approximate location, device/browser, and IP address. | To run, secure, and improve the service. |
How your photos are processed by AI
To create your headshots, your reference photos and the resulting images are processed by Google Cloud Vertex AI acting as our processor, solely to render your order. Google does not use this data to train its foundation models, and we do not use your photographs to train any model of our own.
Legal bases
- Contract — to create your account and produce and deliver the headshots you order.
- Explicit consent — to process the biometric data in your reference photos. You give it when you upload photos and can withdraw it at any time.
- Legitimate interests — to secure the service, prevent abuse, and improve it.
Sharing and sub-processors
We do not sell your personal data. We share it only with the providers needed to run Portrais:
| Provider | Purpose |
|---|---|
| Google Cloud / Firebase | AI image generation, storage, database, authentication, analytics, and hosting. |
| Stripe | Payment processing. |
| ImprovMX | Email forwarding. |
We may also disclose data where required by law or to protect our users’ rights and safety.
International transfers
Our providers may process data outside Switzerland and the EEA. Where they do, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses and recognised Swiss transfer mechanisms.
Data retention
- Reference photos are deleted automatically 7 days after upload.
- Generated headshots are deleted automatically 90 days after they are produced — download anything you want to keep before then.
- Account and order records are kept while your account is active and as long as tax and accounting law requires.
- You can delete any past run from your dashboard at any time.
Your rights
Subject to applicable law, you can request access to, correction of, deletion of, or a copy of your data; restrict or object to certain processing; and withdraw your consent to biometric processing at any time (without affecting processing already carried out). Email privacy@portrais.com to exercise any of these. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EEA/UK, your local authority.
Security
Your data is stored in private, access-controlled storage and transmitted over encrypted connections, with access tied to your authenticated account. No system is perfectly secure, but we apply measures appropriate to the sensitivity of the data.
Cookies and analytics
We use cookies and similar identifiers to keep you signed in and, through Google Analytics, to understand usage. You can control cookies in your browser settings.
Children
Portrais is not directed at children. You must be at least 16 to use it, and you may upload photos of someone under 18 only as their parent or legal guardian.
Changes
We may update this policy from time to time; the “Last updated” date above reflects the current version, and we will flag material changes where appropriate.
Contact
Questions or requests: privacy@portrais.com.