Privacy Policy

1. Introduction

Superable ("we", "our", "us") operates the website and AI portrait generation service. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

We collect minimal information necessary to provide our service:

• Photos you upload: The child's photo and the character/superhero reference image used to generate your portrait.
• Session identifier: A random anonymous cookie to associate generations with your browser session. We do not require account creation or login.
• Payment information: Processed securely by Stripe. We never store your credit card details on our servers.

3. How We Use Your Photos

• Photos are used solely to generate the AI portrait you requested.
• We strip all EXIF metadata (location, device info) from uploaded images before processing.
• Photos are transmitted using SSL/TLS encryption.
• We never share, sell, or use your photos for training AI models.
• All uploaded photos and generated images are automatically deleted after 10 days.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. Images are stored in encrypted cloud storage and are accessible only through authenticated, time-limited URLs. We implement rate limiting and input validation to protect against abuse.

5. Third-Party Services

We use the following third-party services:

• fal.ai: AI image generation processing.
• Stripe: Secure payment processing.
• Vercel: Website hosting and image storage.

6. Cookies

We use essential cookies only: a session cookie to identify your portrait generations and a language preference cookie. We do not use advertising or tracking cookies.

7. Children's Privacy

Our service is designed for parents and guardians to create portraits of their children. We do not knowingly collect personal information directly from children under 13. By using this service, you confirm that you are the parent or legal guardian of any child whose photo you upload.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), you have the right to:

• Access the personal data we hold about you.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Data portability.

To exercise any of these rights, please contact us at the email address below.

9. Data Retention

Uploaded photos and generated portraits are automatically deleted after 10 days. Payment records are retained as required by law for accounting purposes.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at hi@superable.art.