Privacy policy

Amber Portraits is operated by Knotwise Studio LLC, a Wyoming limited liability company. Knotwise Studio LLC is responsible for the personal information handled through this service.

Send privacy questions or requests to support@amberportraits.com, call +1 307 449 1313, or write to Knotwise Studio LLC at 30 N Gould St Ste N, Sheridan, WY 82801, United States.

This policy covers photos, artwork, account information and order details handled through Amber Portraits, including purchases made without an account.

We process the photos you upload, your chosen style, editing instructions and generated versions so you can create, compare, download and order artwork. Photos of identifiable people may contain personal information. Only upload images you are entitled to provide.

If you sign in, we handle your email address and the account information supplied by the sign-in method you choose, which may include your name and profile image from Google. Authentication records and session identifiers help us recognise and protect your account.

When you contact us, we receive your email, message and any attachments you choose to send. Our hosting and security services may process technical request information such as IP address, browser details and request logs to deliver and protect the site.

For purchases, we handle contact details, product choices, order value, currency and payment-status records, plus a delivery name and address for physical orders. Stripe processes payment details; we do not receive or store your full card number. Do not include unrelated sensitive information in your photos or instructions.

We use information to operate sign-in, respond to your requests, create artwork, deliver orders and send receipts, download links and delivery updates, protect against abuse, and meet legal obligations. Where applicable, the legal basis is performing or preparing a contract, our legitimate interests in support and security, consent for optional uses, or a legal obligation. We consider your rights when relying on legitimate interests.

We use your uploaded photos and generated artwork only to create, edit, store and deliver your portrait and fulfil and support your order. We never sell them or use them for marketing, advertising, public galleries, AI model training or any other unrelated purpose. These limits apply whether you create a free preview or make a purchase.

Cloudflare provides infrastructure and the email service used for sign-in messages and transactional order updates. If you choose Google sign-in, Google handles that authentication under its own privacy terms. Your email provider also processes messages you send or receive.

Google Gemini receives the photos and instructions needed to generate and edit your artwork. We do not add your name, email address, delivery address or payment details to generation requests. Stripe receives the checkout and payment information needed to process your purchase. Gelato receives your print file, product specifications, delivery details and relevant order information to produce and ship physical artwork.

On the paid order page, Google Customer Reviews may receive your order reference, purchase email, delivery country and expected delivery date to display its survey invitation. You choose in Google’s invitation whether to receive a review email after delivery. Participation is optional and does not affect your order. This is separate from advertising measurement; we do not send Google Customer Reviews your photos, artwork, street address or payment-card details.

Our artwork service uses the paid Gemini API. Under Google’s Paid Services terms, your photos, editing instructions and generated artwork are not used to improve Google’s products, including its generative AI models. We do not opt in to sharing this content with Google for product improvement.

Google may retain inputs and outputs for a limited period for safety, abuse prevention and legally required disclosures. This is separate from using content to improve its products. Providers may process information outside your country under applicable data-processing terms and transfer safeguards.

• Gelato Privacy Policy — print fulfilment
• Stripe Privacy Policy — checkout and payments

We use AI to create artwork, not to recognise your identity or build biometric templates for identification. We do not use portrait generation to make decisions with legal or similarly significant effects about you.

We share information with legal or regulatory recipients only where required by law or where necessary to address fraud, protect rights or establish or defend a legal claim.

Direct links to uploaded photos and preview images can be opened by anyone who has the link. Please keep these links private and avoid sharing them publicly.

Unpurchased previews and their uploaded reference photos are not automatically deleted just because they are inactive. You can delete an eligible unpurchased project from Your Portraits or request deletion through support. Deletion removes access through the project page and queues its stored files for cleanup; file removal is not immediate. Projects retained for an order cannot be deleted through that control.

We retain information only for as long as needed for its purpose. Account records support your access to the service; purchased artwork supports delivery, downloads and order support. Transaction records are retained for applicable tax, accounting and legal obligations. Support records are kept while needed to resolve requests and related disputes.

Retention depends on whether information is needed for an active project, an order, a support request or a legal obligation. Deleted information may remain in restricted backups until those backups are replaced or expire. Keep a downloaded copy of purchased artwork; access to the service is not a promise of permanent file hosting.

You can request deletion or account closure through support. Some records may need to be retained for legal obligations or an unresolved issue; where that applies, we will explain it. Deleting an account does not itself cancel a paid order.

The site uses necessary cookies and similar storage for sessions, security and continuity while creating artwork or managing an order. Blocking these may affect those functions.

Separately from optional usage analytics, PostHog receives limited technical error reports to help us resolve service failures. These exclude customer identities, photos, artwork, order numbers and request contents. This troubleshooting continues when optional analytics is off.

When analytics is enabled, Google Analytics 4 measures page visits and PostHog measures portrait preparation, generation, preview, checkout, purchases, refunds and download requests. These services receive pseudonymous browser/session identifiers, page or journey stage, device information and limited product and transaction information such as product type, currency, amount and an analytics transaction identifier. We use generic journey paths instead of private project or order URLs. Recognised campaign tags may be retained; other query values, fragments and referrers are omitted. Analytics does not include uploaded photos, artwork, editing instructions, contact details, payment-card details or access tokens.

Analytics and advertising measurement default to on outside the European Economic Area (EEA), and off in the EEA or when we cannot determine your region. Your saved choices take priority. Reject optional turns both off without preventing portrait creation, sign-in or purchases. We do not display ads on this site or use personalised advertising tracking. Advertising measurement is a separate optional choice, described below. Google may process analytics information outside your country under its applicable terms and safeguards.

When advertising measurement is enabled, we save a Google ad click identifier in this browser for up to 30 days and connect it to a purchase you make during that period. We send Google Ads the click identifier, confirmed purchase time, currency, amount and a random transaction reference, including when you do not return after payment. We may update the value for a full refund. We do not send contact details, photos, artwork, portrait instructions or payment-card details for advertising measurement, and do not allow ad personalisation. This choice is independent of analytics.

Open Cookie settings to accept, reject or withdraw consent at any time. We remember your choice in this browser for 180 days. Regional defaults are rechecked on each page load. Withdrawing stops new browser analytics, clears accessible analytics storage, and requests removal of our server-side analytics linkage and queued events. An offline withdrawal is retried when you return online or reopen the site; a request already in flight cannot be recalled. It does not delete information already received by Google or PostHog. Our Cookie policy describes the storage, purposes and controls in more detail.

Service emails include sign-in links, order confirmations, receipts, downloads, delivery updates and replies to support requests. These are separate from promotional messages.

If we send marketing emails, we do so only where permitted and include an unsubscribe option. Unsubscribing from marketing does not stop messages needed to fulfil or support your order. We never use your uploaded photos or generated artwork in promotional messages or create additional artwork from your photos for marketing purposes.

Depending on the laws that apply to you, you may request access, correction, deletion or a portable copy of your personal data, object to or restrict processing, or withdraw consent. Email support with your request. We may need proportionate information to verify that we are responding to the right person.

Withdrawing consent does not change the lawfulness of prior processing. You may also raise a concern with your local data-protection authority. We do not use portrait generation to make decisions about your eligibility for employment, credit or similar services.

Our purchasing service is intended for adults. If information about a child was provided without appropriate permission, contact us so we can review and address it. We respond to privacy requests within the applicable legal time limits and explain any permitted extension.

We take reasonable measures to protect personal information, but no internet service can guarantee absolute security. If a personal-data breach requires notification, we notify the relevant authorities and affected people as required by applicable law, explaining the issue and the steps to address it.

We update this policy when our practices change, display the revised date and provide appropriate notice of material changes. Where a new use requires consent, a policy update alone does not replace that consent.