Privacy Policy · UltimateProfile

Undetectable Inc. dba UltimateProfile.ai ("UltimateProfile", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data, uploaded photos, and facial likeness when you interact with our website, applications, and AI image generation services ("Services").

We do not sell your personal data or your photos.

1. Information We Collect

Account Credentials & Contact Data: When you register or sign in, we collect your email address via Google OAuth or one-time passcode (OTP), along with basic session information.
User Images & Facial Likeness: We collect reference photos, selfies, and images you upload to train custom models (e.g., LoRAs) or use our Reshoot photo correction tool. This includes analyzing facial orientation, lighting, expression, and key landmark features to generate accurate, high-quality portraits.
Generated Outputs: We store the images, photo packs, and Reshoot variants produced by our generative AI engines for your account.
Billing & Payment Information: When you purchase credits or a subscription, transactions are handled directly by Stripe. We collect plan details, active subscription status, and customer IDs, but never store full credit card numbers or security codes on our servers.
Technical & Diagnostics Data: We collect standard operational telemetry including browser type, operating system, IP address, request timestamps, and anonymized error logs to maintain system reliability, mitigate bot attacks, and enforce rate limits.

2. How We Use Your Information

We process your data strictly to provide and maintain the Service:

Delivering AI Photos: Running diffusion models, personalization pipelines, and image upscalers to produce your portraits and Reshoot enhancements.
Automated Safety & Moderation: Inspecting incoming uploads through automated safety classifiers (such as Llama Guard) to prevent illegal content (CSAM) and abusive imagery.
Subscription & Credit Management: Allocating generation credits, processing upgrades, handling renewals, and maintaining billing history.
Customer Support: Troubleshooting failed generations, resolving billing issues, and responding to service requests.

3. We Do Not Sell or Monetize Your Photos

We never sell, rent, or trade your photos, facial data, or personal details to third-party data brokers, marketers, or external advertisers. Your photos are used solely to deliver the photo generation services you request.

4. Data Sharing with Technical Processors

To provide high-performance generative AI at scale, we work with specialized cloud and AI infrastructure vendors:

AI Compute & Inference: We partner with secure GPU inference providers (such as fal.ai, Replicate, and Cloudflare Workers AI). Uploaded reference images are sent over encrypted TLS connections strictly for executing model training and generation jobs.
Storage & Database Infrastructure: Encrypted object storage (Cloudflare R2) and managed databases store your uploaded reference assets, model weights, and generated image gallery.
Payment Gateway: Stripe securely manages credit card processing and subscription lifecycle operations.

We do not share your photos with third parties except as necessary to deliver the Service through these vetted technical processors, or if strictly required by law or legal subpoena.

5. Data Retention & Deletion Rights

Retention of Uploads & Models: Uploaded reference photos and trained personalization weights are stored in your account to enable ongoing photo shoots, style pack generations, and edits.
Deletion on Demand: You can delete photos or generated outputs from your gallery at any time through the dashboard. You may also request complete account and biometric data deletion by emailing support@ultimateprofile.ai. Upon receipt, all reference images, generated assets, and custom model weights are permanently expunged from active storage.
Automated Moderation Purge: Uploads that trigger critical safety violations (such as CSAM) are blocked immediately, barred from persistent storage, and purged from memory caches.

6. Information Security

We employ commercial-grade physical, technical, and administrative safeguards designed to protect your personal data, including:

End-to-end TLS encryption for all data in transit.
Restricted role-based access control (RBAC) to storage buckets and databases.
Secure, encrypted session cookies for authentication.

7. Your Rights (GDPR, CCPA & State Laws)

Depending on your location, you may have specific privacy rights under applicable data protection laws (such as GDPR or CCPA/CPRA), including:

Right of Access: Request a copy of the personal information and photos we maintain about you.
Right to Rectification: Request corrections to inaccurate personal records.
Right to Erasure: Request the deletion of your account, photos, and associated models.
Non-Discrimination: We do not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please email us at privacy@ultimateprofile.ai.

8. Children's Privacy

UltimateProfile is strictly intended for individuals aged 18 and older. We do not knowingly collect or solicit personal information or images from minors under 18. If we discover that a minor's information has been submitted, we will immediately delete it.

9. Updates to This Policy

We may periodically update this Privacy Policy to reflect improvements in our technology, features, or regulatory requirements. We will notify you of material changes by updating the "Last Updated" date at the top of this policy.

10. Contact Us

If you have questions or concerns regarding our privacy practices, contact us at:
Email: privacy@ultimateprofile.ai
Entity: Undetectable Inc. dba UltimateProfile.ai