How to delete your data from a chat analyser
Portraitor operates no accounts, so a deletion request has an unusual shape. What the privacy policy says you can ask for, and the two records that outlive the request.
There is no account to delete. Portraitor’s privacy policy says the service operates no user accounts and retains no email address, so the only copy of your address sits with its payment processor and can be erased there on request.
A deletion request needs something to aim at. The published privacy policy, version 1.3, describes a service built so that no such profile exists, which changes what a request can usefully ask for. It also sets out what is kept, for how long, and what survives an erasure.
There is no account, so there is nothing to close
The policy states in its summary that the service operates no user accounts and retains no email address, that saved portraits remain on your own device, and that no one at Portraitor can read your conversation or your portrait.
That removes the usual target of a deletion request. There is no profile to erase, no stored reading history on a server, and no login to close. What is left is a short list of records that exist in order to take payment and to keep the service working, and the policy names each one. The absence of a login is itself a published design choice rather than an oversight, as the page on analysis without an account sets out.
What the policy says you can ask for
Section 8 lists the rights it makes available: access to your personal data, correction, erasure, receipt of the data in a portable form, objection to certain processing, and withdrawal of any consent you have given. It says these are the rights set out in the UK and EU General Data Protection Regulation, that they are offered to every user wherever they live, and that the same procedure and the same 30 day response period apply to everyone. Requests go to the address published in the policy, or through the Your Data Rights page the policy names.
The policy does not oversell the result. It says that because the service operates no accounts and retains no email address, the scope of most requests is limited. It adds that the personal data associated with you is held by the payment processor and can be erased there on request, and that your portraits reside on your own device and are not accessible to the company. The page on where your portrait is saved covers where those portraits actually sit.
The two records that outlive a deletion request
The retention table in section 7 is specific. Payment records are kept for 7 years because tax law requires it, and the policy states they contain no name, no email address and no card details. A Pass is retained indefinitely, because it is what operates the monthly allowance and allows a cancelled Pass to be reinstated, and the policy says it contains no information identifying you. The Pass code itself is stored only in an irreversible form.
So an erasure request removes your email address from the payment processor. It does not remove the payment record, and the policy explains why in the same table rather than leaving you to ask. The other retention periods are short: technical fault records for 90 days, with IP addresses held in an irreversible form, server access logs for 30 days, and payment confirmations for 30 days. What any of this would yield to an outside demand is a separate question, covered in the page on what a court could get.
A deletion link that expires in thirty minutes
The same table covers the request itself. A data rights request record is kept only until the verification link expires, and consists of an irreversible code derived from the requesting email address, used to limit repeat requests. Deletion links expire after 30 minutes. Links to view or export your data expire after 24 hours. The record is then cleared by daily maintenance.
The thirty minute window is worth knowing before you begin, because a deletion link opened an hour later will already have lapsed and the request has to be started again. The policy states the expiry rather than leaving you to discover it.
Where a deleted record can still sit for a month
The policy states that its hosting provider takes a copy of the database roughly daily and keeps each copy for about one month, and that a record deleted from the live database can therefore persist in those copies for up to a month before they expire. It adds that the copies contain the same records as the live database and nothing more, and that no conversation text and no portrait is ever in them.
That is the limit stated plainly: for up to about a month after an erasure, the deleted record can still exist inside a backup copy. The policy bounds what those copies hold instead of claiming the purge is instant. If you want the full list of who receives anything at all, the page on who else receives your chat sets out every party the policy names as receiving anything, and the page on what an analysis costs covers what you pay and what the payment record holds.
If you are weighing all of this up before uploading anything, the shortest route is to read the policy and then look at what Portraitor actually does with a conversation.
Frequently asked questions
Frequently asked questions
Can I delete the conversation I uploaded?
There is nothing to delete. The policy says conversation content is not retained: it is processed only for the duration of generation, then discarded, and is never written to the database, the backups or the logs.
Will a deletion request remove my portraits?
No. The policy says portraits are held in your browser until you clear them, stored on your device and under your control, so clearing them is something you do yourself.
How long does a data request take?
The policy states a 30 day response period, and says the same procedure and the same period apply to every user wherever they live.
I bought in the iPhone app and have no record. What then?
The policy says purchases made in the app are not linked to your email address, so they cannot be found by it, and asks you to write with your Pass code or the order ID on Apple’s receipt.
There is no account to delete, and the policy says what remains, for how long, and why.
See what Portraitor actually keeps
The policy sets out every record, its retention period and its reason. Read it before you upload anything.
See how Portraitor works →