Privacy Policy

Starlet is designed around a simple principle: photos uploaded for portrait generation should be used for that requested generation workflow, not repurposed to train models for other people. In this policy, “personal information” includes names, email addresses, uploaded photos, generated outputs, and ordinary account or transaction data where a live implementation collects them.

Uploaded photos are used only for the requested generation process and are not used to train models for other users. A production implementation should define a retention schedule and deletion controls in its operational documentation; this static storefront does not itself receive, store, or transmit uploads. Generated results may remain available for the period needed to provide the requested service, subject to the live product's retention settings.

If you contact Starlet, the information you submit may be used to respond to your request, provide support, administer an account, or meet legal obligations. Payment information for a production deployment should be processed by the selected payment provider rather than stored directly by the storefront. The static demo contains no server-side account system and no payment processor.

You should not upload photographs you lack permission to use. If an image contains another person, obtain the necessary authorization before using it. You may request access, correction, deletion, or other rights where applicable law provides them. A live deployment should publish the actual controller identity and contact method; the company contact fields on this demo are intentionally blank until supplied.

Starlet may use essential cookies or local browser storage for basic site preferences, such as remembering a cookie choice. Optional analytics should be disclosed separately and enabled only where lawful. The Cookies Policy provides additional information. This policy may be updated as the live service, vendors, retention periods, or legal requirements change.

Where third-party vendors process information, the production privacy notice should identify their role, purpose, retention arrangements, and any international transfer mechanism required by applicable law. Security measures should be proportionate to the sensitivity of account information and uploaded creative material, with access limited to authorized systems and personnel.