What a court could get from a chat analysis service
Portraitor’s privacy policy devotes a short section to disclosure required by law. It is unusually specific, and the specificity is the point.
Portraitor’s policy says that if it is required by law or by a court to disclose information, the most it can produce is payment records identifying no one, Pass records containing nothing identifying, and fault records with network addresses in irreversible form. It states that it holds no conversation, no portrait and no email address, so none of those can be disclosed by it.
Section 13 of the privacy policy is four sentences long and answers a question most services never raise.
This page reads that section, checks it against the retention table it refers to, and names the one place where the answer is less tidy than it first looks.
The policy answers this in a single paragraph
The wording is narrow and is worth quoting rather than summarising. The policy says that if it is required by law or by a court to disclose information, the most it is able to produce is what section 7 describes: payment records identifying no one, Pass records containing nothing identifying, and fault records with network addresses in irreversible form. It then says it holds no conversation, no portrait and no email address, so none can be disclosed by it.
Note what kind of claim that is. It is not a promise to resist a request. It is a statement that the material does not exist to hand over, which is the only version of this assurance that does not depend on the company’s willingness to fight.
Three kinds of record, and what is inside each
The retention table in section 7 says what each one holds. Payment records are kept for seven years because tax law requires it, and the table says they carry no name, no email address and no card details. A Pass is retained indefinitely so a monthly allowance can be operated and a cancelled Pass reinstated, and the table says it contains no information identifying you.
Technical fault records are kept for ninety days in order to find and correct faults, with network addresses held in irreversible form, and server access logs for thirty days for security. There is also a data rights request record, which the policy describes as an irreversible code derived from a requesting email address, used only to limit repeat requests and cleared by daily maintenance once the link expires.
None of those is the conversation, and none of them is the portrait. How the Pass works covers the one record that persists indefinitely and why it carries nothing.
Nothing to hand over, because nothing was kept
The retention table’s first row says conversation content is not retained, processed only for the duration of generation and then discarded. The row for portraits says they are held in your browser until you clear them, stored on your device and under your control. Section 9 adds that no administrative function can read a conversation or a portrait.
Those three statements are what section 13 rests on. The company’s position is not that it would decline to produce your conversation; it is that it cannot, because the only copy that ever existed on its side was consumed during generation and the readable one is on your machine.
The same logic runs through the neighbouring sections. A comparison built on how long a chat exists follows the same question through a competitor’s published pages, and the limits on the analysis provider covers the one party that does hold submitted content for a period.
The one month that the live database does not describe
Here is where the answer is less tidy, and the policy says it rather than letting you find out. The hosting provider takes a copy of the database roughly daily and keeps each copy for about a month. A record deleted from the live database can therefore persist in those copies for up to a month before they expire.
What is in them is stated in the next sentence: the same records as the live database and nothing more, with no conversation text and no portrait ever in them. So the backup window extends the life of a payment record or a Pass record, not of anything you wrote.
That is the honest shape of it. The disclosure answer is strong for conversations and portraits, and ordinary for the transaction records that any business keeps because the tax rules say so.
A description of a published policy, not advice
Everything above is a reading of what portraitor.ai/privacy says on the day this page was written, with the version number and date printed at the top of that document. It is not legal advice, it is not a prediction about any particular proceeding, and it is not a statement about what any other service holds.
If the question matters to you, the useful move is to read section 13 and section 7 yourself and compare them against the same two sections of whatever else you are considering. Many services in this category do not have a section 13 at all, and the absence is itself informative.
Portraitor publishes both sections, with every previous version of the policy left readable, which is what makes a claim like this checkable rather than merely stated.
What a court could obtain is a different question from what the terms of service allow you to do with a portrait yourself, and the second question has its own page: what you cannot use a chat analysis for sets out the acceptable use clause as written.
Frequently asked questions
Frequently asked questions
Could Portraitor be made to hand over my conversation?
The policy says it holds no conversation, so there is nothing of that kind to produce. Conversation content is listed as not retained, processed only for the duration of generation and then discarded.
What about my portrait?
The policy says portraits are held in your browser until you clear them, stored on your device and under your control, and that no administrative function can read one.
What could actually be produced?
Payment records identifying no one, Pass records containing nothing identifying, and fault records with network addresses in irreversible form. Those are the three the policy names.
Do the backups change the answer?
Only for the records that exist in the first place. The policy says daily database copies are kept about a month and contain the same records as the live database and nothing more, with no conversation text and no portrait ever in them.
The strongest answer to this question is never a promise to refuse. It is a short list of what exists, published before anyone asks for it.
There is nothing to disclose
Portraitor's policy says conversation content is not retained and portraits stay in your browser, so neither can be produced on request.
See how Portraitor works →