Privacy.

What we process

• Your photo — processed to create the avatar, moderated for safety, kept encrypted only during your review window, then deleted. It is never used to train models.
• Your avatar — the stylized portrait and expression assets, stored and served until you delete them.
• Account and usage data — hashed API keys, credit balance, and operational logs (which never contain your images).
• Anonymous statistics — daily counters of product usage (for example, how many avatars were created from a camera capture versus an upload, and which consent declaration was chosen). These contain no names, emails, images or identifiers of any kind.

Why, and on what basis

We process the photo and avatar to provide the service you asked for (contract), with the recorded consent attestation for the person depicted. Safety moderation and abuse prevention are legitimate interests. We don't sell personal data, and we don't use your content for advertising.

Who helps us run it

Google Cloud hosts the service and storage; Google's Gemini models perform generation and safety moderation; Stripe handles payments; an optional voice preview uses OpenAI. Each receives only what its role requires.

Your rights

Access, correction, deletion and portability: delete your avatar in the Console or API (removal is immediate and total, including cached copies), and export a self-hosted bundle of your avatar at any time. EU/EEA residents have the rights in the GDPR; we honor them for everyone. Requests: privacy@rosto.ai.