PORTRAIT STUDIO
Photos & privacy.
Updated September 13, 2026
Original photos
This notice covers the portrait feature updated on September 13, 2026. A selected photo stays in your browser until you press Generate. Our server then sends it to Volcengine’s image service over HTTPS. New originals are not written to our cloud storage, pack records or application logs. The provider processes your input under its own retention and usage policies; we do not promise zero provider retention or exclusion from provider training. Do not upload IDs, children’s photos or sensitive images.
Portraits and public links
Generated images are stored in Cloudflare R2 and pack records in Cloudflare Durable Objects. Pack and image links can be opened without signing in. Anyone with a link can access its content. Pack pages discourage search indexing; this is not access control. Original selfies and account identifiers are not included in public page data.
Deletion and retention
New pack links last 90 days. Use Manage my portraits to delete a pack and its hosted images sooner. Guests use the credential saved in their browser or their private management link; signed-in creators can also use the account that created the pack. Save the private link before clearing browser data. Deletion cannot recall downloaded or cached copies, or replace a deletion request to the generation provider. Scheduled cleanup and storage lifecycle rules remove expired images.
Accounts, limits and browser storage
Clerk provides sign-in. Quotas use a daily account or IP hash; counter state is cleaned up after two days. Browser storage holds your language and pack-management credentials. The current portrait pages do not load Google advertising tags. The ad studio’s account and Stripe billing flows remain separate.
Earlier data and contact
This update does not bulk-delete earlier ad assets or portraits. Previously uploaded images do not become private automatically. For earlier content or account-data access and deletion requests, contact the existing support address hello@asdfg.ai with the relevant pack link. Do not send your private management credential.
Existing ad studio policy (English, unchanged)
Privacy Policy
The short version
We store the minimum needed to run the product: your account, your credit balance, and the ads you generate. We don't sell data, we don't run third-party ad trackers, and your product imagery is yours.
What we collect
- Account — email and name, managed by Clerk (our authentication provider). We never see your password.
- Billing — handled entirely by Stripe. We store your plan and credit balance; card details never touch our servers.
- Inputs — product URLs, prompts, and images you upload to generate ads.
- Outputs — the ad images and videos you generate, so they appear in your library.
How generation works
When you generate, your inputs (prompt, product context, reference imagery) are sent over encrypted connections to AI model providers (e.g. BytePlus/Volcano Engine for Seedream and Seedance models) to produce your ads. Inputs are used to fulfil your request — we do not permit providers to train on your content under our agreements.
Infrastructure
asdfg.ai runs on Cloudflare (Workers, KV, R2). Your data is stored in Cloudflare's network and processed in the region closest to you. Transport is TLS everywhere.
What we don't do
- No selling or renting of personal data, ever.
- No third-party advertising trackers or pixels on the product.
- No training of our own models on your private uploads.
Retention & deletion
Generated assets and inputs stay in your library until you delete them. Deleting your account removes your library and personal data within 30 days, except records we must keep for tax and accounting.
Your rights
Email hello@asdfg.ai to export or erase your data, ask what we hold, or raise a complaint. We respond within 7 days.
Changes
If this policy changes materially we'll note it here and, for significant changes, email you.