← Back to Persona Portraitor

Privacy Policy

Last updated: December 15, 2025

1. Introduction

Persona Portraitor ("we", "our", "us") is operated by Project Fifty4. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our communication analysis service at portraitor.ai (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Conversation Data: When you submit a WhatsApp export or other conversation text for analysis, this data is transmitted to our servers and immediately forwarded to Google's Gemini AI for processing. We do not permanently store your conversation content on our servers.
• Payment Information: When you make a payment, your payment details are processed directly by Stripe. We receive only a payment confirmation and transaction ID; we never see or store your full card details.

2.2 Information from Third-Party Services

• Google Sign-In: When you sign in with Google, we receive your name, email address, and profile picture from Google. We use this solely to identify your account.

2.3 Information Stored Locally

• Conversation History: Your analysis history (input text and results) is stored in your browser's local storage (IndexedDB), not on our servers. This data never leaves your device unless you choose to share it.
• Session Data: We use cookies and session storage to maintain your login state.

2.4 Automatically Collected Information

• Server Logs: Our servers may log IP addresses, browser types, and access times for security and diagnostic purposes. These logs are retained for a limited period.

3. How We Use Your Information

We use the information we collect to:

• Provide the conversation analysis service
• Process payments
• Maintain and improve the Service
• Respond to your inquiries
• Comply with legal obligations

4. Third-Party Services

Our Service relies on the following third-party services, each with their own privacy policies:

• Google (Authentication): Google Privacy Policy
• Google Gemini AI (Analysis): Your conversation text is processed by Google's Gemini AI. Google's AI services are subject to Google's Privacy Policy and Data Processing Terms.
• Stripe (Payments): Stripe Privacy Policy

5. Data Retention

We retain different categories of data for specific periods:

Data Category	Retention Period	Reason
Conversation Content	Not stored	Processed transiently; never persisted on our servers
User Account Data	Until deletion request	Required for service provision
Payment Records	7 years	Legal requirement (tax compliance)
Server Logs	30 days	Security and diagnostic purposes
Browser Local Storage	Until you clear it	Stored on your device only

6. Your Rights (GDPR and Other Privacy Laws)

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Data Portability: Request your data in a machine-readable format.
• Objection: Object to certain types of processing.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data transmission
• Secure authentication via Google Sign-In
• No permanent server-side storage of conversation content
• Regular security reviews

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your data may be processed in countries outside your residence, including the United States (where Google and Stripe operate). These transfers are protected by appropriate safeguards including Standard Contractual Clauses.

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.