Privacy Policy

At Portrana, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered photo styling service. Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

When you create an account or use our Service, we may collect the following personal information:

• Account Information: Email address, username, password (encrypted)
• Profile Information: Display name, profile picture (optional)
• Billing Information: Payment details processed through secure payment providers
• Communication Data: Messages, feedback, and support inquiries you send to us

1.2 Content You Upload

When you use our Service, you upload images for AI styling. We temporarily store and process these images to provide the Service. Image retention periods vary by subscription tier:

• Free tier: 30-day automatic deletion from generation date
• Pro tier: Permanent storage until account deletion

Free tier images include a watermark. Pro tier images are watermark-free. Images are stored securely via cloud storage providers with encryption at rest and in transit.

1.3 Usage Information

We automatically collect information about how you interact with our Service:

• Device information (device type, operating system, browser type)
• Usage patterns (features used, time spent, generation history)
• IP address and general location data
• Log data (access times, pages viewed, errors encountered)

1.4 Mobile App Permissions (Android)

When you use our Android mobile application, we request the following permissions to provide core functionality:

• Camera Access: To capture photos directly within the app for AI styling. You can choose to grant or deny this permission. Photos are processed immediately and not stored by the camera permission itself.
• Storage Access: To save generated images to your device gallery and access photos you choose to upload. We only access images you explicitly select.
• Share Functionality: To enable sharing of styled images to other apps on your device (social media, messaging, etc.). This uses Android's native share system.
• Vibration/Haptics: To provide tactile feedback during interactions (button presses, actions). This does not collect any data.

You can manage these permissions at any time through your Android device settings (Settings → Apps → Portrana → Permissions). Denying permissions may limit certain features but will not affect core functionality.

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our AI styling service
• Image Processing: To process your photos and generate styled outputs
• Account Management: To manage your account, subscription, and preferences
• Customer Support: To respond to your inquiries and provide assistance
• Service Communications: To send you important updates, security alerts, and administrative messages
• Analytics: To understand usage patterns and improve service quality
• Fraud Prevention: To detect and prevent unauthorized access and abuse
• Legal Compliance: To comply with legal obligations and enforce our terms

3. Data Storage and Security

3.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest
• Secure authentication and password hashing
• Regular security audits and monitoring
• Access controls and authentication requirements

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

3.2 Data Retention

We retain your information only for as long as necessary to provide the Service and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for up to 30 days after account deletion
• Generated Images: Free tier (30-day automatic deletion), Pro tier (permanent until account deletion)
• Usage Data: Retained for analytical purposes for up to 24 months
• Credit Transaction History: Retained for up to 7 years for financial compliance and audit purposes
• Legal Requirements: Some data may be retained longer if required by law

4. Cookies and Tracking Technologies

4.1 What We Use

We use cookies and similar tracking technologies to improve your experience:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with the Service

4.2 Your Cookie Choices

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may affect your ability to use certain features of the Service.

5. Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating the Service:

• Authentication Services: To manage user accounts and secure access
• Cloud Storage Providers: To securely store your images and data
• Payment Processors: To process subscription payments securely
• AI Processing Services: To generate styled images from your uploads
• Analytics Providers: To understand usage patterns and improve the Service
• Customer Support Tools: To provide efficient support and communication

These service providers are contractually obligated to protect your information and use it only for the purposes we specify. We do not sell your personal information to third parties.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You have the right to access and download a copy of your personal information. You can export your generated images through your account settings.

6.2 Correction and Update

You can update your account information at any time through your profile settings. If you notice any inaccuracies, please contact us for assistance.

6.3 Deletion

You can request deletion of your account and associated data at any time. Upon deletion, your data will be permanently removed within 30 days, except where we are legally required to retain certain information.

6.4 Opt-Out of Communications

You can unsubscribe from promotional emails by clicking the unsubscribe link in the email. Note that you will still receive essential service-related communications.

6.5 GDPR and CCPA Rights

If you are located in the European Economic Area or California, you have additional rights including:

• Right to object to processing of your data
• Right to restrict processing in certain circumstances
• Right to lodge a complaint with a supervisory authority
• Right to know what personal information is collected and shared

6.6 DPDPA Rights (India)

If you are located in India, under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights:

• Right to Access: Request confirmation of whether we process your personal data and obtain a copy of such data
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to legal obligations
• Right to Grievance Redressal: Lodge complaints with our Grievance Officer if you believe your rights have been violated
• Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity
• Right to Withdraw Consent: Withdraw consent for processing at any time (see Section 11 for details)

To exercise any of these rights, please contact our Grievance Officer (details in Section 10). We will respond to your request within 7 working days as required by DPDPA.

7. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately so we can delete that information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Inquiries

Grievance Officer (DPDPA Compliance)

For privacy-related complaints or concerns under the Digital Personal Data Protection Act, 2023 (DPDPA), you may contact our designated Grievance Officer:

Response Time: We will acknowledge your inquiry within 48 hours and provide a resolution within 7 working days as required by DPDPA. For general inquiries, we typically respond within 30 days.