Privacy

Privacy Policy

Last updated: 7 June 2026

1. Who we are (Data Controller)

  • Kārlis Matīss Jurgenovskis (individual / private person)
  • Riga, Latvia
  • Contact for data matters: kmj.visuals@gmail.com

2. What we collect

  • Your name and email address (both tools).
  • For the AI portrait tool: a selfie photo you upload.
  • For the audit tool: the website URL you submit and any optional notes you provide.
  • We also store hashed email/IP usage events for abuse prevention and service security.

3. Why we use it (purposes)

  • To deliver what you asked for — your AI workflow audit, or your AI-generated portrait — by email.
  • If, and only if, you tick the optional box: to send you occasional automation tips and offers.
  • To protect the free tools from abuse and keep usage within safe operating limits.

4. Legal basis

  • Delivering your audit or portrait: performance of the service you requested (GDPR Art 6(1)(b)).
  • Marketing emails: your explicit consent (GDPR Art 6(1)(a) + ePrivacy Art 13). You can withdraw it anytime.
  • Security and abuse prevention: legitimate interest (GDPR Art 6(1)(f)).

5. Who processes your data for us

  • Resend — sends our emails.
  • Supabase — stores your submission securely.
  • Google (Gemini API) — generates your portrait from your selfie. We use a paid (billed) tier; your selfie is not used to train Google's models. Google may retain content briefly for abuse-monitoring purposes only.
  • We never sell your data or share it for others' marketing.

6. International transfers

  • Your selfie is processed by Google's Gemini API, and your email may be processed by Resend (email delivery); these providers may process data outside the EU/EEA, including in the United States. Such transfers are covered by EU Standard Contractual Clauses under the providers' data-processing terms. Your submission is stored with Supabase in the EU (eu-central-1).

7. How long we keep it

  • Selfie (your upload): deleted within 24 hours of generating your portrait.
  • Your portrait: available via your email; our copy is removed after 7 days (the email attachment is yours to keep).
  • Name + email: kept until you ask us to delete them, or you unsubscribe (for marketing).
  • Abuse-prevention usage events are deleted after 90 days.

8. Your rights

  • You can ask us to access, correct, delete, or export your data, object to processing, or withdraw consent — email kmj.visuals@gmail.com. You can also complain to Latvia's Data State Inspectorate (Datu valsts inspekcija), www.dvi.gov.lv.

9. Automated processing

  • Your portrait is generated by an AI model from your selfie, with no human review. This produces an image only; it makes no decision about you.

10. Changes

  • We'll update this page if our practices change; the date above shows the latest version.