Privacy Notice
ProfilePro is operated by CK Enterprises, Australia ("we", "us"). This notice explains what information we collect when you use profilepro.online and our photo studio, what we do with it, who else handles it, and how long we keep it. For any privacy question or request, email support@profilepro.online.
The short version
- The photos you upload are used to make your pictures, then deleted from our server once your shot is made, or within about an hour if it is not.
- We check that your photos and your finished pictures show the same person. That check runs on our own server; we never store or share faceprints.
- Finished pictures stay on our server for 30 days so you can save them to your phone, then they are deleted.
- Our image provider (Google, reached through OpenRouter) does not use your photos to improve its products.
- We do not sell your information, and we never use your pictures in advertising without your written permission.
What we collect
- Account: your email address and password (stored only in scrambled, hashed form by our database provider), your shot balance, whether you have used your free shot, and when you signed up and signed in.
- Your uploaded photos: the 1 to 5 photos of yourself you add before pressing Go.
- Your shots: the type and finish you chose (Dating, CV or Social; Colour or B&W), the scene used, whether the shot worked, and a likeness score (a single number showing how closely the picture matched your headshot).
- Finished pictures: the portraits we make for you, and which ones you added to your Kit.
- Purchases: which pack you bought, when, and the payment reference from Stripe. We never see or store your card number.
- Messages: anything you email us.
- Technical information: your IP address and browser details when you use the site. Our server keeps a technical log of events such as "shot made" or "shot failed" (no photos) to fix faults.
The face check
To stop you being shown a picture of a stranger, we compare faces at two points: when you upload a photo (to check it is clear, shows one person, and shows the same man as your headshot) and when a picture is made (to check it really is you). If a picture is not recognisably you, we try again, and if it still fails your shot is given back.
The check works out a faceprint, a set of numbers describing a face, in our server's memory for the moment of the comparison. Faceprints are never saved and never sent to anyone else. We keep only the likeness score described above. The check runs on our own server in Sydney.
By uploading photos you agree to this check. If you do not want your photos checked this way, please do not upload them.
How we use your information
To run your account, make the pictures you ask for, take payment and add your shots, send account emails (confirming your email address, resetting your password), answer you, keep the service safe from misuse (for example, limits on how fast sign-ups and shots can be made), fix faults, and keep the records the law requires.
Who else handles it
We use these companies to run ProfilePro. Each receives only what it needs for its part:
- Contabo: hosts our server, in Sydney, Australia. Your photos pass through it and the face check runs on it.
- Supabase: our database and private picture storage, in Sydney, Australia. It holds your account, shot records, uploaded photos (until deleted as described below) and finished pictures (for 30 days).
- OpenRouter (United States) and Google (Nano Banana 2 image model): your uploaded photos and the scene instructions are sent through OpenRouter to Google to make each picture. OpenRouter states it does not store the content of requests unless the account owner turns logging on (ours is off), and keeps only details such as request size and timing. Google's paid service terms say Google "doesn't use your prompts (including … images) or responses to improve our products". Google keeps them "for a limited period of time, solely for detecting and preventing violations" of its Prohibited Use Policy. Google may process them in the United States or other countries where it operates.
- Stripe: takes payments. Stripe receives your card details and email directly at checkout and may process them in the United States and other countries. See Stripe's privacy policy.
- Resend: sends our account emails, processed in Japan.
- Google (Gmail): emails you send to support@profilepro.online are forwarded to and stored in our Gmail inbox.
- Google Fonts: our home page loads its typeface from Google, which shares your IP address and browser details with Google. The studio itself does not.
Some of these companies are outside Australia, so your information may be processed in the United States, Japan and other countries. We may also share information where the law requires it.
How long we keep it
- Uploaded photos: deleted from our server as soon as your shot is made. If a shot fails or is never finished, they are deleted within about an hour (we keep them that long so Retry works).
- Faceprints: never kept.
- Finished pictures: kept for 30 days from when they were made, then deleted automatically, including from your Kit. You can delete any picture sooner yourself. Save the ones you want to your phone.
- Account and shot records: kept while your account is open. Ask us and we will delete your account.
- Purchase records: kept for as long as Australian tax law requires (usually five years).
- Emails to us: kept while needed to help you, then deleted.
Cookies and storage on your device
We use only what the studio needs to work. There are no advertising or tracking cookies.
- A sign-in cookie keeps you signed in.
- While a studio tab is open, your browser keeps the photos you added, so a page refresh does not lose them. They are cleared when you close the tab or sign out.
- Your browser remembers if you dismissed the "add to home screen" card.
Pictures you save to your phone stay on your phone until you delete them.
Waitlist
The early-access link on our home page opens an email to us. Nothing is sent unless you send it. We use your email address only to send the launch updates you asked for. Reply with "Unsubscribe" and we will stop.
Keeping it safe
Everything travels over encrypted HTTPS. Photos and pictures sit in private storage that only our server can open, and every request is checked against the signed-in account. Our server's firewall is locked down. No service can promise perfect security, but if a breach ever puts you at risk we will tell you and the authorities as the law requires.
Your rights
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it and your account. Email support@profilepro.online from the email address on your account. We may need to confirm it is you, and we may keep records the law requires us to keep. We will reply within 30 days.
If you live in the European Union or the United Kingdom, you also have the rights given by the GDPR, including the right to object and to take your data elsewhere. Our legal basis for using your information is providing the service you asked for, and your consent for the face check.
If you are unhappy with how we handled your information, please tell us first so we can put it right. You can also complain to the Office of the Australian Information Commissioner or the data protection authority where you live.
Under 18s
ProfilePro is for adults only. We do not knowingly collect information about anyone under 18. If you think a child has used the studio, tell us and we will delete their information.
Changes
When the way we handle information changes, we will update this page and its date. If a change matters to how your photos or pictures are used, we will tell you before it takes effect.