← Back to Portraitor
Your data, your call

Your Data Rights

Version 1.2 · Last updated: September 21, 2026

In short
You may inspect the data we hold, obtain a copy of it, or have it erased. The rights available to you are set out below, together with the procedure for exercising each of them.

The controller responsible for the data described on this page, and the party a request under it is made to, is Project 54. The registered company behind that name, and its full handling of your data, are set out in the Privacy Policy.

The rights on this page are those set out in the UK General Data Protection Regulation and the EU General Data Protection Regulation. We make them available to every user of the Service, wherever you live, on the same terms and within the same 30-day period. If you wish to withdraw consent to usage analytics, no request is needed: block the analytics cookies in your browser, use Google's opt-out add-on, or turn on your browser's Global Privacy Control or Do Not Track setting, which we honour.

Access

Obtain a copy of the data associated with your email address: your payment history, including processor references and whether each receipt was delivered, and any Pass linked to the address with its usage count, price paid and renewal date.

Rectification

Require us to correct any inaccuracy. As your email address is held by our payment processor, corrections are made there.

Erasure

Have your email address erased from our payment processor, which is the only place it is held. There is no account to delete.

Portability

Receive your payment and Pass records in a structured, machine-readable file. Your portraits are already held on your device. The one thing the export does not contain is your Pass code itself, because it is a credential and you already hold the only copy.

Objection

Object to processing carried out on the basis of our legitimate interests, such as our technical fault records.

Complain

Lodge a complaint with a supervisory authority: the ICO in the UK, or your national authority in the EU.

Make a request

Enter your email address and select the request you wish to make. We will send a verification link to confirm your identity, and will process your request within 30 days.

Because we do not hold your email address ourselves, we locate your records by asking our payment processor which customer the address belongs to. The reference they return is what links to your payment and Pass records here. Your address is used to perform that lookup and to send you the verification link. It is not added to our records by making this request, with one exception: to limit repeat requests we keep an irreversible code derived from your address until the link expires. It cannot be turned back into your address and is cleared automatically.

What would you like to do?

Verification is completed by you rather than automatically, so that automated email scanners cannot trigger it. Links to view or export your data expire after 24 hours; deletion links expire after 30 minutes.

✉
Check your email

We sent a verification link to your address. Click it to continue. View and export links expire in 24 hours; deletion links expire in 30 minutes.

Verify your request

Click the button below to verify your identity and process your data request. Verification is not automatic, so that automated email scanners cannot trigger it on your behalf.

Your Data

Warning. This will erase your customer record from our payment processor, removing your email address from it. Payment records, which contain no name, no email address and no card details, are retained for 7 years as required by tax law. A copy of the deleted record may remain in our hosting provider's routine backups for up to about one month before those backups expire. This action cannot be reversed.

✓
Done

About your data
  • ·The content of your conversation is never stored on our servers. It is processed to produce your portrait and then discarded.
  • ·Your saved portraits are held in your browser. Clearing your browsing data for this site deletes them permanently.
  • ·We operate no accounts and hold neither your name nor your email address. Your email address is held by our payment processor, and erasure removes it there.
  • ·A Pass contains no information identifying you, so there is nothing within it to erase.
  • ·If you have never used the Service but believe you appear in a conversation someone else submitted: we hold nothing about you. Your name and contact details were replaced with placeholders on that person's own device before anything was transmitted, we never received them, and the portrait was delivered to that person alone. There is therefore nothing for us to find, copy or erase. If you have a concern about how the Service was used, please write to the address below and we will respond.
  • ·Payment records are retained for 7 years as required by tax law. Each holds the amount, the dates, the product purchased, any refund made, our payment processor's references and the outcome of sending your receipt, but no name, no email address and no card details.

Your saved portraits are held in your own browser and may be removed by clearing this site's data in your browser settings. For any other request, please write to admin@portraitor.ai and we will deal with it.

Version history

Each version of this document is listed below, together with the date it took effect and what changed.

VersionIn effect fromWhat changed
1.2 September 21, 2026 The page now opens by naming the controller a request is made to, and points to the Privacy Policy for the registered company behind that name. It previously explained how to complain about the controller without naming it. The name is now written Project 54.
1.1 September 16, 2026 Named the laws these rights come from and confirmed they apply to everyone. Explained how to withdraw consent to analytics. Added a note for people who appear in a conversation but have never used the Service. Listed what an access summary contains, stated that the export withholds the Pass code, disclosed the request-limiting record, and added the backup window to the deletion warning.
1.0 September 13, 2026 First published version of this page.