How PhotoPort handles your personal data in the UK.

PhotoPort AI assistance

Typed messages and live voice audio are processed by our AI service provider. Voice processing begins only after you choose Talk with Voice. Typed messages and voice transcripts are stored in one server-side PhotoPort AI conversation, together with a structured summary used to continue naturally across pages, refreshes and communication methods. The browser stores only a signed, opaque essential visitor token; it does not store the conversation or AI memory locally.

Before typed text or a voice transcript is saved or reused as AI context, PhotoPort replaces recognised payment-card numbers that pass card-number validation, common credential and token formats, and clearly labelled passwords, security codes or secrets with fixed redaction placeholders. The same filtering is applied again before saved context is sent to an AI provider. Automated redaction may not recognise every unusual format, so it is a safety measure rather than a reason to submit sensitive information.

Live voice audio reaches the AI provider before a transcript exists, so PhotoPort cannot remove a password, card number, security code or access token from the audio before the provider processes it. Do not type or say those details to PhotoPort AI. The voice warning is shown before microphone access is requested.

If you sign in or create an account in the same browser, the existing conversation is attached to that account without creating a second history. Package recommendations and checkout actions may be connected to the same conversation so PhotoPort AI can continue after checkout. This operational continuity does not depend on optional analytics consent.

Guest conversations that are not attached to an account are deleted after 180 days. An attached conversation remains with the account while needed to provide the service and is erased when the account is deleted.

Personal data we collect

• Account and contact details, including your name, email address, phone number, login details, account status, and support messages.
• Uploaded photos, generated PhotoPort images, removed images, approvals, downloads, and gallery activity.
• Model profile details, including date of birth or age, guardian details where needed, location, height, eye colour, hair colour, shoe size, measurements, preferred work, experience, social handle, and short bio.
• Payment and package details, including selected plan, checkout session, payment status, receipt details, billing portal activity, Stripe references, and promo code use.
• Device, usage, and security information, including IP address, browser, device type, a signed essential device identifier, keyed anti-abuse signals and non-reversible whole-image fingerprints, pages visited, essential cookies, server logs, optional analytics events, and error information. The image fingerprints can identify straightforward re-encodes of the same upload, but we do not create a biometric or facial-identification template for this check.
• Communication details, including email/SMS activity, opt-out records, deletion requests, and support notes.

Why we use personal data and our lawful bases

Photos, profile details, and automated image creation

PhotoPort uses automated image-generation technology to create portfolio-style images from the photos you upload. We use your uploaded photos and profile details to provide the PhotoPort service, show your results, support retakes, and prepare paid portfolio features where applicable.

We do not use this process to make legal or similarly significant decisions about you. We do not decide whether you can work as a model, get representation, receive credit, get employment, or receive any public benefit. We do not use your photos to identify you across other services, and we do not create biometric templates for identification.

Special category and sensitive-feeling information

Photos, measurements, age, and appearance details can feel sensitive. We handle them carefully and only use them for the PhotoPort service, support, safety, and account administration. We do not sell your uploaded photos, generated photos, profile details, or facial data.

If a future feature needs explicit consent because it uses special category data or biometric identification, we will ask before using that feature.

Who we share personal data with

We share personal data only where needed to provide, secure, and improve PhotoPort. This may include providers for authentication, hosting, databases, storage, payment processing, image generation, email, SMS, analytics, support, security, accounting, legal advice, and business administration.

Payment details are handled by Stripe and similar payment infrastructure. PhotoPort does not store your full card number. We may also share information if required by law, to protect rights or safety, or as part of a business transfer.

International transfers

PhotoPort is available online and uses providers that may process personal data outside the UK, including in the United States. Where UK data protection law requires safeguards, we use appropriate measures such as contractual protections, transfer assessments, and provider security controls.

Retention and deletion

We keep personal data for as long as needed to provide PhotoPort, maintain the account, complete payments, meet tax and accounting duties, resolve disputes, prevent abuse, and maintain backups. If you delete your account or ask us to delete your data, we delete or de-identify information we no longer need, except where limited records must be kept for legal, payment, security, or operational reasons.

After account deletion, we may retain one-way keyed hashes of sign-in, device, connection, phone, and uploaded-image signals for up to 365 days solely to enforce the free-starter limit, prevent fraud, and investigate abuse. These records do not contain the original photo, raw IP address, hardware serial number, or a facial-recognition template, and cannot be used to display the original values.

Your UK data protection rights

You may have the right to be informed, access your personal data, correct it, erase it, restrict processing, object to certain processing, receive a portable copy, withdraw consent where consent is the lawful basis, and complain to the Information Commissioner's Office.

You can object to direct marketing at any time. You can also withdraw optional analytics consent by changing your cookie settings.

To make a request, email support@photoport.us from the email address on your PhotoPort account. We may need to verify your identity before acting on a request. You can contact the ICO at ico.org.uk if you are unhappy with how we handle a privacy concern.

Children and younger customers

PhotoPort is not intended for children under 13. Customers under 18 should use PhotoPort with a parent or guardian, and we may request guardian details before creating photos, accepting payments, or allowing continued portal use. If we learn that we collected information from a child without the permission required by law, we will take steps to delete it.

Cookies, analytics, and marketing

We use essential cookies for account access and security. Checkout details, saved setup progress, PhotoPort AI history, and customer communications are stored in PhotoPort's database. Optional analytics only loads after you accept analytics cookies. We may send setup reminders, result reminders, service updates, and permitted promotional emails. You can opt out of promotional email using the unsubscribe link in the message. You can opt out of marketing or reminder SMS where an opt-out route is provided, or contact support@photoport.us.

Changes and contact

We may update this notice when PhotoPort, the law, or our providers change. The latest version will be posted here with the updated date.

For privacy questions or requests, email support@photoport.us.