Privacy Policy
This Privacy Policy explains how TECHSTER SRL-D ("aibooth", "we", "us") collects, uses and protects your personal data when you use aibooth at https://aibooth.photos. We are the data controller for that processing.
aibooth turns a few selfies into a polished, AI-generated headshot. Because that involves processing images of your face, we treat your privacy with particular care — please read this policy carefully.
Who we are
The controller is TECHSTER SRL-D, Cluj-Napoca, str. Buna Ziua, nr. 35D, imobil 2, ap. 2. For any privacy question, or to exercise your rights, contact our privacy team at privacy@aibooth.photos.
The data we collect
We collect only what we need to run the service:
- Account data — when you sign in with Google we receive your name, email address and your Google account identifier.
- The selfies you upload — the photos you submit to generate a headshot. These are images of your face (see “Your facial data” below).
- Your style choices — the purpose, background and attire you select for a portrait.
- Generated portraits — the headshots we create for you, stored briefly so you can download them.
- Credit & purchase data — your free and paid credit balances and a record of any credit packs you buy.
- Usage & device data — if you accept analytics cookies, interaction and device information collected via our analytics provider (see our Cookie Policy).
Your facial data (special-category data)
The selfies you upload are images of your face. Depending on how they are used, facial images can be special-category (biometric) data under the GDPR, which receives extra protection. We process them solely to generate the headshot you ask for and to check that the result resembles you.
Our lawful basis for processing your facial data is your explicit consent (Art. 9(2)(a) GDPR), which you give by ticking the consent box before you generate. You can withdraw that consent at any time — withdrawal does not affect processing already carried out, and you can stop uploading photos and delete your account whenever you wish.
We never store your uploaded selfies on our servers. They are streamed directly to our AI provider for processing and are not written to our disk. Only the finished portrait is saved (briefly — see “How long we keep data”).
How we use your data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Create and manage your account and credit balance, and provide the service | Performance of a contract (Art. 6(1)(b)) |
| Process your selfies to generate and quality-check your portrait | Your explicit consent (Art. 9(2)(a)) |
| Take payment for credit packs and keep transaction records | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Analytics to understand and improve the product | Your consent via the cookie banner (Art. 6(1)(a)) |
| Keep the service secure, prevent abuse and defend legal claims | Our legitimate interests (Art. 6(1)(f)) |
Who we share data with
We do not sell your personal data. We share it only with the service providers (processors) that make aibooth work, under contracts that require them to protect it:
| Provider | What they do | Data shared |
|---|---|---|
| Google sign-in (authentication) | Your name, email and Google account id | |
| Fal.ai | AI image generation and an automated identity check; it may use an underlying model from Google as a sub-processor | The selfies you submit and your style choices |
| Stripe | Payment processing for credit packs | Your email and purchase details. Card details are entered directly with Stripe — they never reach our servers |
| Contentsquare | Product analytics (only if you accept analytics cookies) | Usage, interaction and device data |
International transfers
Some of our providers are based outside the EEA, including in the United States. Where your data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision (e.g. the EU–US Data Privacy Framework). You can ask us for more detail at privacy@aibooth.photos.
How long we keep data
- Uploaded selfies — not retained by us at all; they are streamed to the AI provider for processing and not saved on our servers.
- Generated portraits — stored only so you can download them and automatically deleted within 24 hours.
- Account data (name, email, Google id, credit balances) — kept while your account exists and deleted when you delete your account.
- Purchase records — kept as needed to complete and account for your transaction; deleted with your account, except where we must retain limited records to meet legal (e.g. tax) obligations. Stripe keeps its own payment records under its policies.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to our processing of your personal data, the right to data portability, and the right to withdraw consent at any time.
To exercise any of these, email privacy@aibooth.photos, or use “Delete my account & data” in your account menu to erase your account and all your stored portraits immediately. We respond to requests within the time limits the GDPR sets (normally one month).
You also have the right to lodge a complaint with a data protection supervisory authority — in your own country, or with our lead authority, the ANSPDCP in Romania.
Children
aibooth is for adults. It is not directed at, and must not be used by, anyone under 18, and you must not upload photos of anyone under 18.
How we protect your data
We protect your data with encryption in transit (HTTPS), access controls, the transient handling of your selfies described above, and automatic deletion of generated portraits. No service can be perfectly secure, but we take these measures seriously.
Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, take reasonable steps to let you know.