Home  /  Legal

Privacy Policy

Last updated: September 30, 2026

PrismRetouch ("we", "us") provides AI portrait retouching at prismretouch.com. This policy explains what data we handle, why, and the choices you have. The short version: your photos are processed transiently and never stored, and we never use them to train models.

What we process

  • Uploaded images. Your photo is held in memory while our AI retouches it, the result is served back to your browser, and both are then discarded. Temporary result URLs under /tmp/ expire automatically within one hour.
  • Email address. Only if you buy credits or log in. It identifies your credit balance and delivers one-time login codes.
  • Payment data. Card details are entered directly into our payment processor (Dodo Payments) — we never see or store card numbers. We receive only the purchase amount and your email.
  • Technical data. IP address, browser type, and a device fingerprint used solely for abuse prevention and free-trial accounting.

What we never do

  • We never sell or rent personal data.
  • We never use uploaded photos for advertising, profiling, or AI model training.
  • We never keep copies of your uploads or results after delivery.

Cookies & local storage

We use browser local storage (not third-party tracking cookies) to remember your login token, guest ID, and device fingerprint so the trial and checkout flows work. Clearing your browser storage signs you out but does not delete your credits — they are tied to your email and can be restored any time.

Third parties

  • Dodo Payments processes purchases under its own privacy policy.
  • Cloudflare provides TLS termination and DDoS protection in front of our servers.
  • Google Fonts serves the typefaces on this site (your browser fetches font files from Google).

Data retention

Account records (email, credit balance, purchase history) are kept while your balance is active. Retouch tasks, logs containing IPs, and fingerprints are rotated out within 90 days. Email us to delete your account entirely.

Your rights

You may request access, correction, export, or deletion of your personal data at any time by emailing [email protected]. We respond within 30 days.

Children

The service is not directed at children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be noted on this page with a new "last updated" date.

Contact

Questions about privacy: [email protected].