123 Cheese Studio — Privacy Policy
Effective 27 August 2026. This Policy explains how Intaglo, Inc. handles portrait and account-related information for customers in the United States, United Kingdom, Australia, Canada, and New Zealand.
Your photos, your subject
Every face and full-body reference must show the same person. The uploader must be that person or an authorised adult family organiser. We do not permit another person's body photo, scraped images, unauthorised stock photos, or public-figure images without documented express authority as references.
Controller and privacy contact
Intaglo, Inc. · Delaware, United States
1. Scope and controller
This Policy applies to 123 Cheese Studio family portraits, remote family uploads, previews, paid unlocks, optional customer reviews, support, rights complaints, abuse prevention, and related websites. Intaglo, Inc., a Delaware corporation, is the controller or business responsible for personal information unless a specific notice says otherwise. This Policy is designed as a common baseline for customers in the United States, United Kingdom, Australia, Canada, and New Zealand; additional state, provincial, or national rights continue to apply.
2. Same-person photo rule
For each portrait subject, the face photo and full-body photo must depict that same person. We do not permit another person's body to be used as a shape reference. The uploader must be the person pictured or an adult who has that person's express authority. A parent or lawful guardian must authorise processing for a minor. Internet, scraped, stock-model, or otherwise unauthorised images are prohibited. Images of celebrities, entertainers, athletes, influencers, royals, public officials, candidates, politicians, or other recognisable public figures are prohibited without documented express authority from the person and all necessary copyright owners.
3. Information we collect
Depending on the feature, we process an account name, email address, securely hashed password or Google account identifier, accepted policy versions, account-consent timestamp, optional marketing-email preference, names or labels, family role, user-selected visual presentation, confirmed height, face and full-body reference images, optional venue images, theme, wardrobe, gaze and pose choices, generated portraits and quality reports, random session and member identifiers, timestamps, device or diagnostic data, support communications, and locally stored preferences. If the visitor expressly enables Studio analytics, the homepage stores a random visit identifier and one assigned demonstration-variant identifier in session storage and may record variant impression, selection, portrait-start, checkout-start, and payment-completion events so we can understand which service explanation is useful. These first-party attribution records do not contain a name, email address, photo, IP address, browser user-agent, or browser fingerprint. After a completed paid portrait, the host may optionally provide a rating, review text, first name, country, and separate public-display consent. Our checkout database does not store a customer name, email address, telephone number, postal address, full card number, IP address, or browser user-agent. It stores only a random order identifier, random session identifier, purchased entitlement code, amount, currency, payment status, provider transaction identifiers, terms version, and payment timestamps. Stripe or PayPal separately processes the payer information required to complete the payment.
4. Where information comes from
We receive information directly from the person using the service, from an authorised family organiser, from a parent or lawful guardian, from a family member using a remote-upload link, and automatically from the browser or server during operation. If an organiser provides another person's information, the organiser must give that person this Policy and obtain the required authority before upload.
5. Why we use information
We use personal information to create and secure accounts; record current policy acceptance and optional marketing-email choices; create and deliver requested portraits; match face and body references; apply height and presentation choices; review input and output quality; detect public-figure, impersonation, false-association, political-manipulation, fraud, abuse, and unsafe-content risks; operate sessions and remote uploads; process payment and discounts; with optional Studio-analytics consent, measure which first-party homepage demonstration leads to a portrait start or purchase; collect honest service feedback; publish a review only with separate consent and moderation; investigate rights complaints; provide support; secure and debug the service; keep transaction and consent evidence; comply with law; and establish, exercise, or defend legal claims. We do not use customer reference photos to train our own general-purpose AI model. We send promotional email only when the account holder separately selects that optional preference, and each such email must provide an unsubscribe method.
6. Legal bases for UK customers
For UK GDPR purposes, contract is the primary basis for processing needed to provide the requested service. Consent is used where processing is optional or where special-category biometric processing requires explicit consent. Legitimate interests may support proportionate security, fraud prevention, quality assurance, service diagnostics, and legal claims after balancing the person's rights. Legal obligation supports tax, accounting, regulatory, and lawful-request records. Consent may be withdrawn for future processing, but withdrawal does not invalidate earlier lawful processing or records we must retain.
7. Facial, body, and biometric information
A photograph is personal information when a person is identifiable. Technical analysis of facial or bodily characteristics may also be biometric information, and may be sensitive or special-category information when used or intended for unique identification under applicable law. Our quality review may compare whether two submitted photos appear to show the same person and whether a generated portrait follows the requested identity constraints. We do not use this analysis for access control, credit, employment, insurance, health diagnosis, or government identification.
8. AI processors and other recipients
Reference images and instructions may be sent to OpenAI for portrait generation. Reference images, generated candidates, and identity constraints may be sent to Google Gemini for automated quality and identity-release checks. Hostinger provides the web hosting and MySQL database used for account and operational records. Google Drive provides private portrait-file storage. The operator's authorised Mac worker may process encrypted render jobs while it is online. Account access may use Google or an email address and securely hashed password; the configured email provider delivers password-reset messages. Stripe and PayPal process checkout, refunds, and related fraud signals; the Studio does not receive or store full card numbers and does not copy payer contact details into its checkout database. Hosting, security, analytics, email, or support providers may process the minimum information needed for their services when enabled. We may disclose information to professional advisers, courts, regulators, law enforcement, transaction counterparties, or another entity involved in a corporate reorganisation when legally permitted and appropriately protected.
9. International transfers
Intaglo is based in the United States, and providers may process information in the United States and other countries. Those countries may have different privacy laws. Where UK law requires a transfer mechanism, we rely on an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard. For Australia and Canada, we remain accountable as required for information handled by overseas processors and provide notice of likely overseas processing. Where New Zealand Privacy Act 2020 Information Privacy Principle 12 applies to a disclosure, we use a recipient subject to the Act or comparable safeguards, an appropriate contractual safeguard, another permitted basis, or express informed authorisation as the law requires. Provider locations can change and are governed by the applicable provider contract and transfer documentation.
10. Retention and deletion
Active render input packages are encrypted in transit and held in private storage only while a render or permitted recovery attempt is pending. Temporary memory buffers may remain for up to 30 minutes. A family invitation normally remains open for seven days unless the host closes, extends, or completes it sooner. Face and full-body source photos are kept only while the active studio, recovery period, or stated retention window requires them, and are removed when the room or account is deleted or the applicable server cleanup expires them. Paid, host-approved portraits are retained through the customer's private account and family link for 30 days by default, after which they are deleted unless a different retention choice is expressly offered and selected. Browser storage may retain essential sign-in, consent, interface, or short-lived payment-return state, but portrait membership and workflow state are restored from the server account. When Studio analytics is enabled, session storage may also retain a random visit identifier and the assigned homepage demonstration during that browser session. Turning analytics off removes those two analytics values. Random, photo-free homepage attribution events are retained only long enough to compare service explanations and conversion outcomes, then aggregated or deleted. Private review feedback is kept only as long as needed to improve and support the service; an approved public review may remain published until consent is withdrawn or the review is no longer used. Payment, transaction, terms-acceptance, authority, fraud, safety, rights-complaint, security, and legal records are retained only as long as reasonably necessary under tax, accounting, contract, limitation, dispute, evidence-preservation, and regulatory requirements, then deleted or de-identified. A complaint or lawful preservation duty may require restricted preservation while the matter is investigated. AI providers may retain data under their applicable service and data-processing terms.
11. Cookies and local storage
Essential cookies and local storage keep account access, security, private invitation state, saved studio progress, checkout continuity, the mobile welcome preference, and the visitor's cookie choice working. They cannot be disabled through our preference panel because the requested service would not work reliably without them. Studio analytics is optional and remains off unless the visitor enables it. We currently use no advertising cookies and no cross-site behavioural-advertising tracker. Cookie choices last for up to 180 days, may be reopened through Cookie choices in the site footer, and are requested again when the preference format materially changes. Disabling Studio analytics stops new analytics events and removes its random visit and homepage-variant values from session storage. Browser controls can also delete site data, but deleting essential data may sign the user out or remove locally saved progress.
12. Security
We use measures appropriate to the sensitivity and context of the information, including random private access tokens, private file storage, server-side database access controls, payment-webhook signature verification, idempotent payment-event handling, limited-purpose processing, validation, provider controls, and fail-closed quality and abuse checks. No network or storage method is completely secure. If a breach creates a legally reportable risk, we will notify affected people and regulators as required by applicable US, UK, Australian, Canadian, and New Zealand law.
13. No sale or behavioural advertising
We do not sell customer reference photos, body data, height, generated portraits, or biometric information. We do not share those items for cross-context behavioural advertising or targeted advertising. If our practices change, we will update this Policy and provide any notice, consent, opt-out, or limit-use mechanism required before the new practice begins.
14. Children
The service is for adults. Children may be included in a family portrait only through a parent or lawful guardian. We do not knowingly collect a child's images directly from a child. Where the US Children's Online Privacy Protection Act applies, verifiable parental consent is required before covered online collection. UK, Australian, Canadian, New Zealand, provincial, and state child-privacy requirements may impose additional age and consent rules. Contact us to request deletion of a child's information submitted without proper authority.
15. Your privacy rights
Subject to applicable exceptions, you may ask to access, correct, delete, restrict, or obtain a copy of your information; object to certain processing; withdraw consent for future processing; or complain. UK users may also have portability rights and may complain to the ICO. Australian users may request access and correction and complain to the OAIC after contacting us. Canadian users may request access and correction, challenge compliance, and complain to the OPC or an applicable provincial commissioner. New Zealand users may request access and correction and complain to the Office of the Privacy Commissioner. Residents of California and other covered US states may have rights to know, access, correct, delete, obtain a portable copy, opt out of covered sale, sharing, targeted advertising or profiling, limit certain sensitive-information uses, and appeal a refusal. We do not discriminate against anyone for exercising a privacy right.
16. Automated review
Automated quality and abuse review can block, retry, or withhold a portrait when inputs may depict different people, an image is unclear, person count or requested presentation appears wrong, identity similarity is insufficient, visible defects are detected, or the request may involve an unauthorised public figure, impersonation, false endorsement, political manipulation, or prohibited content. This decision protects subjects, rights holders, users, and the service and does not determine legal identity or produce a similarly significant decision about employment, credit, housing, insurance, education, health, or public benefits. A user may provide authorised, clearer references or contact the Studio for review; we may require evidence of authority.
17. Requests, verification, and authorised agents
Submit a request through the current privacy contact displayed on this page. We may verify the requester using information already associated with the session and may ask for additional information only when reasonably necessary. An authorised agent may submit a request where local law permits, but we may require proof of authority and direct identity confirmation. We aim to respond within the period required by the applicable law and will explain any lawful extension or refusal.
18. Complaints and regulators
Please contact our privacy lead first so we can investigate. A person whose image was submitted without authority may also request access restriction, deletion where available, and preservation of relevant complaint evidence. If unresolved, you may contact the UK Information Commissioner's Office, the Office of the Australian Information Commissioner, the Office of the Privacy Commissioner of Canada or an applicable provincial commissioner, the New Zealand Office of the Privacy Commissioner, the California Privacy Protection Agency, a US state attorney general or privacy authority, or the US Federal Trade Commission, depending on where you live and which law applies.
19. Changes and contact
We will update the version and effective date when this Policy changes. Material changes affecting existing information will receive additional notice or consent where required. The operator is Intaglo, Inc., Delaware, United States. Use the current privacy contact shown at the top of this page for questions, requests, or complaints.
Privacy regulators
This Policy is a common baseline. Mandatory privacy and consumer rights in your country, state, province, or territory continue to apply.