Last updated June 2026
This Privacy Policy explains what Typortrait (“we”) collects, why, and your rights. We collect only what we need to create your portrait and process your order. For how we handle facial geometry specifically, see our Biometric Data Policy.
Typortrait (which also operates the Loved in Words memorial service) is the organization responsible for, and the data controller of, the information described here. Contact our privacy contact at support@typortrait.com with any privacy question, to exercise your rights, or to raise a concern.
Where the UK/EU GDPR applies, we rely on: your explicit consent to analyse facial geometry (a special category of data — we ask before processing); performance of a contract to create and deliver your portrait and fulfil orders; and our legitimate interests in operating, securing, and improving the Service. You can withdraw consent at any time, which stops further processing.
To generate and deliver your portrait, process your payment and any print order, provide support, and operate, secure, and improve the Service. We do not use your photo to train face-recognition systems, and we do not use it to identify anyone.
Your uploaded photo and generated files are stored only to provide your preview and download, and are automatically deleted after about 30 days. Facial geometry is computed in memory at render time and discarded immediately — no faceprint is retained. You can request earlier deletion at any time via our data request page.
We may retain limited order, payment, and transaction records for longer where required for tax, accounting, fraud-prevention, or other legal obligations. We also keep a minimal record of your consent (the fact that you consented and confirmed your age — no photo or biometric data) for longer, so we can demonstrate that consent was given.
For resilience, we keep encrypted, off-site backups. After you delete your data (or it reaches the deletion period above), a copy may persist in those backups for a short additional period — about 35 days — until they rotate and it is purged. Deletions you request take effect in the live Service immediately.
We share personal data only with the service providers (sub-processors) needed to run Typortrait:
We do not sell or “share” your personal information (as those terms are defined under U.S. state privacy laws), and we do not use it for cross-context behavioural advertising. We may disclose information if required by law. This list may change as our providers do; the “last updated” date above reflects the current set.
Optional social feature. After purchase you may generate a shareable “reel”; it appears on our channels only if you explicitly tick the optional box (off by default). See section 6.5 of the Terms of Use.
We operate from the United States, so if you are outside the U.S. your information is transferred to and processed there. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) and/or your consent.
Depending on where you live, you may have rights to access, correct, delete, port, or object to/restrict processing of your data, and to withdraw consent. To exercise them, use our data request page or email us. We will not discriminate against you for exercising your rights, and we respond within the time limits the law requires.
California residents have the rights to know, delete, and correct their personal information, and to limit the use of sensitive personal information. Your photo and facial geometry are treated as sensitive personal information, used only to provide the portrait you requested. We do not sell or share personal information. Submit a request via our data request page.
If you are in Canada, we handle your personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws, including Quebec’s Law 25 and the personal-information laws of British Columbia and Alberta. We collect, use, and disclose personal information only for the purposes described in this policy, and we obtain your express consent before analysing the facial geometry in your photo — sensitive information that we process transiently and never retain as a faceprint. We do not create or maintain a biometric database (see our Biometric Data Policy). You may access or correct your information, withdraw consent, or request its deletion at any time through our data request page. Because we operate from the United States, your information is transferred to and processed there and may be subject to access by U.S. authorities under U.S. law; we remain accountable for it and require our service providers to safeguard it. If you have a concern we cannot resolve, you may contact the Office of the Privacy Commissioner of Canada — and, in Quebec, the Commission d’accès à l’information.
If you upload a photo of someone else, you confirm you have the right to do so (see the Terms of Use). If you believe your image was uploaded without your permission, contact us via the data request page and we will remove it.
The Service is not directed to children under 13, and you should not upload a minor’s photo without the consent of their parent or guardian.
We use reasonable technical and organisational measures to protect your data, but no method of transmission or storage is completely secure.
We may update this policy; the “last updated” date above will change accordingly.
Questions? Email support@typortrait.com.