Privacy Policy

Who we are

UAE Unity Portrait (“the service”, “we”, “us”) is a single-purpose web application that produces a cinematic UAE-themed portrait from a photo you upload, for your personal sharing. We do not sell your data and we do not create user accounts.

Why we collect your data

We collect only the data required to produce and deliver your portrait:

• The photo you upload, so our image provider can condition the generated portrait on your likeness.
• The style and slogan you select, so the prompt and overlay are correct.
• The Stripe session metadata (amount, currency, session ID), so we can confirm payment before generating your portrait.
• A per-request opaque token, so only you can reach the result page and download link.

How long we keep it

• Uploaded photo: deleted from our storage no later than 7 days after upload (Cloudflare R2 lifecycle policy).
• Intermediate candidate images: deleted no later than 24 hours after generation.
• Final portrait: available for download for at least 30 days, then deleted from our storage.
• Generation record (no image content): retained in our database for operational record-keeping and tax compliance for the period required by applicable law.

Who processes your data

We rely on the following sub-processors. Each operates under its own published privacy terms:

• Vercel Inc. (USA): application hosting and edge delivery.
• Neon, Inc. (USA): PostgreSQL database holding the generation record.
• Cloudflare, Inc. (USA): object storage for uploaded photos and generated portraits (Cloudflare R2).
• Stripe Payments Europe, Ltd. (Ireland / global): payment processing. We never see your card details.
• fal.ai (USA): image generation inference (currently Google Gemini 2.5 Flash Image, with Black Forest Labs FLUX.1 Kontext as an alternate). The image provider’s terms of service govern training-data use; see “Model training” below.
• Sightengine (optional, France): NSFW content filter for uploaded photos, used to enforce our content policy.
• Resend (USA): transactional email delivery (recovery emails containing your result URL). Used only when you provide an email during Stripe Checkout. Retained for operational record-keeping for 30 days then deleted.
• Axiom Telemetry, Inc. (USA): structured request logs and operational telemetry (no image content; request IDs and timing metadata only). Retained per Axiom's default retention policy.
• Upstash, Inc. (USA): ephemeral Redis state for rate-limit counters, the generation kill-switch flag, and daily budget tracking. No image content or personal data is stored; counters expire automatically.

Cross-border data transfer

Some of our sub-processors are located outside the UAE. When your data is transferred to them, we rely on their own published security and data-protection commitments. By using the service, you consent to this transfer. If you do not consent, do not use the service.

Model training

We use the image provider under terms that prohibit training their public foundation models on inputs that transit their API. The written confirmation of this term is required before we lock in a provider for production launch. If this commitment changes, we will update this policy and stop using that provider.

Your rights

You have the right to:

• Ask what data we hold about your generation request (identified by the Request ID you receive during checkout).
• Ask us to delete your data before the automatic retention period ends.
• Ask us to correct inaccurate record data we hold about your generation request.
• Withdraw consent and stop using the service at any time.

Data deletion — how to request

Email privacy@uae-unity.com from any address, and include your Request ID (shown at the bottom of the generation pages). We will confirm deletion within 7 days of receiving your request, or sooner.

If you did not save the Request ID, email us anyway — describe the approximate date and style and we will attempt to locate your record.

Age requirement

This service is only for adults (18+). The age gate shown on your first visit is self-attestation; by continuing you confirm you are at least 18 years old.

Contact

For anything not covered above, reach support@uae-unity.com.