Privacy Policy

Last updated: June 29, 2026

This Privacy Policy explains how DivaPrompt ("DivaPrompt", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use our website at divaprompt.com and our AI image-generation services (the "Service").

By using DivaPrompt, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service. This policy should be read together with our Terms of Service.

1. Who We Are

DivaPrompt is an AI-powered image-generation platform that helps users create stylized portraits, headshots, and creative imagery from prompts and reference inputs. We are the data controller responsible for your personal information processed through the Service. You can reach us at any time at contact@divaprompt.com.

2. Information We Collect

Information you provide

Account information. When you create an account, we collect your email address and an encrypted password (authentication is handled through Supabase). If you sign in with a third-party provider, we receive your email and basic profile information from that provider.
Content you submit. The text prompts you enter, any reference images you upload, your style selections, and the images the Service generates for you.
Communications. Any information you include when you contact us for support or feedback.

Payment information

Payments are processed by our third-party payment provider, Creem. We do not collect or store your full card number or banking credentials on our servers. We receive limited transaction details from Creem (such as confirmation of payment, the pack purchased, and the last digits / card type) to manage your purchases and portrait balance. Creem's handling of your payment data is governed by Creem's own privacy policy.

Information collected automatically

Usage data. Pages visited, features used, generations performed, and approximate time spent, collected through analytics.
Technical data. IP address, browser type, device type, operating system, and referring URLs.
Cookies and similar technologies. See Section 7 below.

3. How We Use Your Information

We use your information to:

Provide, operate, and maintain the Service, including generating images from your prompts;
Create and manage your account and portrait balance;
Process payments and prevent fraud through our payment provider;
Respond to your requests and provide customer support;
Monitor and improve the performance, safety, and quality of the Service;
Enforce our Terms of Service and prevent misuse or abuse of the Service;
Comply with legal obligations and respond to lawful requests.

Where required by law, we rely on the following legal bases: performance of our contract with you (providing the Service), your consent (e.g., optional analytics cookies), our legitimate interests (security, improvement, fraud prevention), and compliance with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We share information only with the service providers necessary to operate DivaPrompt, and only to the extent required:

Provider	Purpose
Supabase	Account authentication and database storage
Cloudflare	Website hosting, content delivery, image storage, and security
Creem	Payment processing and portrait pack purchases
Google Analytics	Aggregated usage analytics
Replicate (AI image-generation models)	Processing your prompts and reference inputs to generate images

These providers are permitted to use your information only to perform services for us. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).

5. AI-Generated Content and Reference Images

When you submit a prompt or a reference image, it is transmitted to the AI model that produces your result. You should only upload reference images that you own or have permission to use, and that depict people who have consented to their image being used. Do not upload images of other people without their permission. We may retain prompts and generated images to operate your account and to detect and prevent misuse, as described in Section 9.

How we handle your own facial image is described in Section 6 (Facial Images and Biometric Data).

6. Facial Images and Biometric Data

Creating your portraits requires us to process photographs you upload that contain your face ("facial images"). In some places a facial image is treated as biometric or special-category personal data, so we explain our handling here.

What we process and why. When you upload a selfie, we process your facial image only to (a) generate the portraits you request and (b) run automated safety screening for prohibited content. Safety screening is performed by our provider Sightengine, which returns face-analysis data used solely for moderation.

Consent. We process your facial image only with your consent, which you provide when you upload a photo to generate a portrait. You may withdraw consent at any time by deleting the upload or your account; withdrawal does not affect processing already performed. (For anonymous use of the free preview, face-analysis data is not linked to an identifiable account.)

No training, sale, or sharing. We do not use your facial images or generated portraits to train AI models, and we do not sell them. We share them only with the service providers needed to run the Service (see Section 4).

Retention and deletion.

Uploaded selfies are automatically deleted 30 days after upload.
Watermarked previews and unpaid preview results are deleted 24 hours after they are created.
Generated portraits are kept until you delete them or delete your account.
Face-analysis data used for safety screening is kept until you delete your account, then removed.

When you delete your account, we immediately remove your uploaded selfies, generated portraits, and stored face-analysis data.

7. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. We use:

Essential cookies — required for authentication and core functionality;
Analytics cookies — used by Google Analytics to measure usage in aggregate.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in or using parts of the Service.

8. International Data Transfers

DivaPrompt and its service providers may store and process your information in countries other than your own, including the United States. Where personal data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by applicable law.

9. Data Retention

We keep your account information for as long as your account is active. For photos and generated content we apply these periods:

Uploaded selfies are deleted 30 days after upload.
Watermarked previews and unpaid preview results are deleted 24 hours after creation.
Generated portraits are kept until you delete them or delete your account.
Face-analysis data used for safety screening is kept until you delete your account.

We may retain limited transaction and security records for as long as needed for fraud-prevention and legal-compliance purposes. When you delete your account, we remove your uploaded photos, generated portraits, and face-analysis data immediately, except limited records we are required to keep by law.

10. Your Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you;
Request correction of inaccurate information;
Request deletion of your information;
Object to or restrict certain processing;
Request a copy of your data in a portable format;
Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at contact@divaprompt.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.

11. Security

We use industry-standard measures to protect your information, including encryption in transit, access controls, and trusted infrastructure providers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please use a strong, unique password and keep your login credentials confidential.

12. Children's Privacy

DivaPrompt is intended only for users who are at least 18 years old. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor has provided us with personal information, please contact us at contact@divaprompt.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Your continued use of DivaPrompt after changes take effect means you accept the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or your personal information, please contact us:

DivaPrompt Team Email: contact@divaprompt.com Website: divaprompt.com