Legal
Privacy Policy
Last updated: May 5, 2026. This policy is prepared for private beta and should receive final legal review before public launch.
1. Introduction
Photoset.ai provides tools for creating AI-generated photoshoots. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and how you can request access or deletion.
By using Photoset.ai, you agree to this policy. If you do not agree, do not use the service.
2. Information we collect
- Account information: email address, authentication details, optional profile information, and billing/customer identifiers.
- Reference photos: photos uploaded to train a personalized AI model, which may include facial geometry and biometric information.
- Consent records: timestamped records confirming adult eligibility, rights/permission, and biometric-processing consent.
- AI model data: personalized LoRA/model weights derived from uploaded training photos.
- Generated images: photoshoots created through the service and stored in your account.
- Usage and technical data: pages visited, feature usage, device/browser information, IP address, cookies, logs, and security events.
3. Biometric data notice
When you upload photos to train a personal subject, Photoset.ai processes facial geometry to create a personalized AI model. This may be considered biometric data under laws such as Illinois BIPA and similar privacy laws.
We collect explicit consent before training. Uploaded training photos are deleted after training completes. Personalized model weights remain only so you can generate images, and they are deleted when you delete the subject, delete your account, or after applicable inactivity/retention limits.
We do not sell, lease, trade, or profit from biometric data. Third-party processors may handle photos or outputs only to operate the service, such as AI training/generation, storage, payments, hosting, and moderation.
4. How we use information
- Operate the service, authenticate users, and maintain accounts.
- Train personalized AI models and generate images at the user's request.
- Process billing, subscriptions, tokens, credits, refunds, and receipts.
- Moderate uploads/outputs, detect abuse, enforce policies, and protect users.
- Respond to support, deletion, access, and legal requests.
- Improve reliability, security, performance, and user experience.
We do not use your uploaded photos or generated content to train general-purpose AI models.
5. Service providers
Photoset.ai may use service providers including Supabase for authentication/database/storage, Replicate or other approved AI providers for model training and generation, Stripe for payments, Vercel or similar infrastructure providers for hosting, and moderation vendors such as Sightengine for safety checks.
Providers are used only as needed to operate the service. We do not sell personal information.
6. Retention and deletion
| Reference training photos | Deleted after training completes |
|---|---|
| Personalized AI model weights | Until subject/account deletion, or 3 years of inactivity |
| Generated images | Until deleted by the user or account closure |
| Billing records | Retained as required for legal/tax obligations |
| Consent records | Retained to document biometric consent and deletion requests |
| Usage and security logs | Retained only as needed for operations, abuse prevention, and security |
7. Your rights
You can request access, correction, deletion, portability, or consent withdrawal by contacting us. EU/EEA, UK, California, Illinois, Texas, Washington, and other residents may have additional rights under applicable law.
To exercise rights, email privacy@photoset.ai. We will respond within the timeframe required by applicable law.
8. Security, cookies, minors, and changes
We use access controls, private storage, encryption in transit, provider-side security controls, and operational monitoring to protect user data. No system is perfect, and we will provide legally required breach notices if needed.
Photoset.ai uses essential cookies for authentication and service operation. Analytics or optional cookies may be added only with appropriate notice/consent where required.
Photoset.ai is not for users under 18. Do not upload photos of minors for training or generation.
We may update this policy. Material changes will be posted here and, where appropriate, sent by email.
9. Contact
Privacy: privacy@photoset.ai
Support: support@photoset.ai
Legal/DMCA: legal@photoset.ai
Formal company address and EU representative details must be finalized before public launch.