Privacy Policy
Last updated: June 11, 2026
Portrait Journey (Siders.ai, “we”, “us”) lets a team create a collaborative card in which a recipient’s photo becomes an AI-generated cartoon portrait that grows as colleagues sign. This policy explains what we collect, how we use it, who we share it with, and your rights.
Information we collect
- Card details — the recipient’s name, an optional subtitle, and personalization notes the creator writes.
- Photos — a photo of the recipient that the creator uploads to generate the portrait.
- Messages — the name, message, optional “moment”, and any image a colleague adds when they sign.
- Creator email — if provided, so we can email the card’s links and a payment receipt.
- Payment information — handled directly by Stripe. We do not see or store full card numbers.
- Limited technical data — your IP address is used transiently for rate-limiting/abuse prevention and is not stored in our database.
How we use it
- To generate the portrait and run the signing and reveal experience.
- To process payment and email the card’s links to the creator.
- To prevent abuse and keep the service working.
AI processing & third parties we share with
We use trusted sub-processors to deliver the service. Data is shared only as needed for these functions:
- Replicate (running Google’s “Nano Banana” model) — receives the uploaded photo to generate the cartoon portrait.
- Anthropic (Claude) — receives the personalization notes to turn them into the portrait’s “unlock” details.
- Supabase — database, file storage, and realtime hosting.
- Stripe — payment processing.
- Resend — sends the card-links email.
- Vercel — application hosting.
Some of these providers operate in the United States, so your information may be transferred and processed there. We do not sell your personal data.
How long we keep it & photo handling
- Uploaded source photos are deleted from our servers once the portrait has been generated, and in all cases within 24 hours. The generated cartoon images and the card’s messages are kept so the card keeps working.
- Card data is retained until the card’s creator deletes it (see your rights below) or requests deletion, and in any case is automatically deleted about 6 months after the card is created.
- Generated portrait images are served from our storage and are not publicly listed, but anyone with a card’s link can view that card.
Consent
Creators confirm they have the recipient’s permission to use their photo before generating a portrait. We record the time that confirmation is given. If you are a recipient and did not consent, contact us and we will delete the card.
Your rights
Depending on where you live (including under the GDPR and CCPA), you may have the right to access, correct, or delete your personal data, and to object to certain processing. You can:
- Delete a card and all its data yourself from the card’s admin dashboard (“Delete card & all data”), which removes the photos, generated images, and messages.
- Contact us at hello@portrait-journey.com to request access or deletion.
Cookies
We use only what’s necessary to run the app. Stripe may set cookies as part of secure payment processing. We do not use advertising trackers.
Children
Portrait Journey is not directed to children and is intended for adults creating cards in a workplace or similar setting.
Changes
We may update this policy; we’ll revise the “last updated” date above when we do.
Contact
Questions or requests: hello@portrait-journey.com.