1. Data Controller
Buinsoft Technology s.r.o., Na Folimance 2155/15, Vinohrady, 120 00 Praha 2, Prague, Czech Republic | IČO 19795319 | info@buinsoft.com
2. Information We Collect
Uploaded Photos (Biometric data, Art. 9 GDPR) — processed only with your explicit consent.
Usage & Transaction Data — IP address, browser, and device information; payment details are handled by our third-party payment gateway.
3. Purpose & Legal Basis
We process data to provide the service (Art. 6(1)(b) GDPR). Your facial data is processed solely to generate your image, on the basis of your explicit checkbox consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR).
4. Data Retention & Automatic Deletion
Your original photo and the generated images are stored for a maximum of seven (7) days, to allow you to retrieve your results and purchases, after which they are automatically and permanently deleted. No biometric template is retained beyond this period.
Where a generation is saved to a user account, it is retained for as long as it remains in that account and is permanently deleted when you remove it or delete your account.
Uploads rejected by our safety checks may be retained for up to two (2) days exclusively for abuse-prevention and safety review, after which they are permanently deleted. You may request earlier erasure of any of your data at any time at info@buinsoft.com.
5. Data Transfers & Third Parties
We use trusted cloud/AI API providers under contracts that ensure GDPR compliance and deletion after processing. Your photos are never used to train general AI models, and are never sold.
6. Cookies & Analytics
Necessary: cookies and local storage needed to run the site, for example to keep you signed in, remember your language and store your cookie choice (the fh_consent cookie, kept for 12 months). These do not require consent.
Optional, only with your consent (Art. 6(1)(a) GDPR):
- Microsoft Clarity (Microsoft Corporation): heatmaps and session recordings that show how pages are used (clicks, scrolling and mouse movement). Cookies: _clck (1 year) and _clsk (1 day).
- Google Analytics 4 (Google Ireland Ltd.): visit and traffic statistics.
- Meta Pixel (Meta Platforms Ireland Ltd.): measuring our advertising.
These providers may process data in the United States. In the EEA, the UK, Switzerland and South Korea they stay off until you click Accept; elsewhere they are on by default. You can accept, reject or withdraw your consent at any time via Cookie settings at the bottom of every page. Rejecting also deletes these cookies from your browser.
7. Your Rights Under GDPR
You have the right to access, rectification, erasure, restriction, objection, and data portability. Once the retention period has elapsed and data has been automatically deleted, a processed image can no longer be recovered. Contact us at info@buinsoft.com.