Privacy policy
Draft for review by counsel before launch. Last updated October 28, 2026.
This policy explains how InFrame handles personal information, including photos of people submitted to our service.
Our role
When a business uses our API, that business decides whose photos to submit and why. We process those photos on its behalf as a service provider (a "processor" under GDPR). The business is responsible for telling the people involved and getting their consent. When you use the demo on our website, we are the controller of the photos you upload.
What we collect
- Photos of people and products submitted to generate images, and the generated images.
- Consent records supplied with each request (method and the customer's reference).
- Account details: work email, company name, billing information (handled by Stripe).
- Technical data: a one-way hash of the requesting IP address for abuse prevention and rate limits.
How long we keep it
- Submitted photos are deleted 24 hours after processing.
- Generated images are deleted after 30 days (24 hours for website demo images), or immediately when a customer deletes them through the API.
- We do not use submitted or generated images to train AI models.
Who we share it with
Our sub-processors: the AI model provider that generates the image (Google), cloud hosting and storage, and Stripe for payments. We do not sell personal information.
Biometric information
We do not create or store face templates, face geometry or other biometric identifiers. Photos are passed to an image model to produce a new image and then deleted on the schedule above.
Your rights
If a business submitted your photo, contact that business first. You can also email privacy@aivertise.tech to request access to or deletion of your information, and we will help or pass the request to the business responsible.