Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains what personal data Fottory collects, why we collect it, and what rights you have. Fottory is an AI photo service, provided by a company of the same name registered in the Netherlands (in this policy, "Fottory", "we", and "us"). We are the data controller for the data described here.

The short version

We never train AI models on your photos. We never sell your data, and we never share your photos with other people. We only process your photos to produce the results you asked for, whether that is a new photo or a finding about one you already had. Fottory is built to be GDPR compliant.

1. What we collect

• Photos you upload. The selfies you send us so we can generate your results.
• Photos we generate for you.
• Photos you send to the photo check, and what we concluded about each one. The check needs an account, so these are held against it and are covered by everything below that applies to your account, including deletion.
• What you tell us about yourself so we can help you write: the facts you type in, the answers you keep, and the drafts we produced from them.
• Account details. Your email address and basic settings.
• Payment details. Handled by our payment provider. We receive a record that you paid, but not your full card number.
• Location for currency. We detect your country from your IP address so we can show prices in the right currency (euros, US dollars, or British pounds).
• Usage data. Basic analytics and device information that help us keep the site working and improve it.

2. Why we use your data, and our legal basis

Under the GDPR we need a legal basis for each use of your data.

• To generate your photos: your photos may count as special category (biometric) data, so we rely on your explicit consent, which you give when you upload them. You can withdraw this consent at any time.
• To check photos you already have: the same rule applies, because a photograph of your face is the same kind of data whether we generate from it or only look at it. We rely on your explicit consent, which you give on the screen where you upload, and we record which version of that wording you were shown.
• To help you write your profile: to perform our contract with you. The facts you type in are ordinary personal data, not biometric, and we use them only to draft text for you and to check that text against what you said.
• To run your account and take payment: to perform our contract with you.
• To keep the service secure and improve it: our legitimate interest in running Fottory well.
• To show the right currency: our legitimate interest in showing you a price you can read.

3. We do not train on your photos

We do not use your uploaded photos, or the photos we generate for you, to train, fine-tune, or improve any AI model. Your photos are used only to create your own results.

4. Who we share data with

We do not sell your data, and we never share your photos with other users. We do use a small number of trusted providers who process data on our behalf, under contracts that require them to protect it:

• a cloud hosting and content delivery provider (Cloudflare), which serves the site and helps detect your country for currency,
• a payment provider, which processes payments,
• an analytics provider, which helps us understand how the site is used.

These providers act as our processors and may only use the data to provide their service to us.

5. Where your data is processed

Your data may be processed inside or outside the European Economic Area. When data leaves the EEA, we rely on legal safeguards, such as the European Commission's standard contractual clauses, to keep it protected.

6. How long we keep it

We keep your uploaded photos and generated photos while your account is active, so you can come back to them. If you ask us to delete your account or your photos, we remove them within 30 days, except where we must keep limited records for legal or accounting reasons.

The photo check keeps two different things for two different lengths of time.

• The photos and their findings stay with your account so the page opens on them when you come back. They stay until you delete the photos or the account.
• The record of the run outlasts the images. It holds when you agreed, which wording you were shown, and what we found. It contains no photograph, and it is what we would rely on if anyone later asked whether consent was given.

The check counts against your account. Alongside that we store a one-way hash of your IP address, which we use only to stop one network running the check at a volume no person could. It cannot be turned back into the original value, and it is used for nothing else.

7. Your rights

Under the GDPR you have the right to:

• ask for a copy of the data we hold about you,
• correct data that is wrong,
• ask us to delete your data (the right to be forgotten),
• restrict or object to how we use it,
• receive your data in a portable format,
• withdraw your consent at any time.

To use any of these rights, email info@fottory.ai. You also have the right to complain to your local data protection authority.

8. Cookies

Fottory uses a small number of cookies and similar technologies to keep the site working and to measure how it is used. You can control non-essential cookies through the choices we offer and through your browser settings.

9. Security

We take reasonable technical and organisational measures to protect your data. No online service can promise perfect security, but we work to keep your photos and account safe.

10. Children

Fottory is for adults. You must be at least 18 to use it, and it is not intended for anyone under 18.

11. Changes to this policy

These rules may change in future. When we update this policy, we will change the date at the top of the page. If a change is important, we will try to tell you.

12. Contact

For any privacy question, or to reach the person responsible for data protection at Fottory, email info@fottory.ai.