Trust Center
Security & Privacy
Your photos are personal. Here is a plain description of how we handle them, what we do and do not do, and how to reach us with questions.
Your Data, Your Control
Photos are used to make your images, and you decide what stays.
Used only for generation
Photos you upload are used to create the images you ordered. We do not use them for advertising or unrelated purposes.
Deletion on request
You can delete generated images from your account, and you can ask us to delete your personal data and account at any time.
Clear policies
Our Privacy Policy, Data Processing Agreement and sub-processor list describe what we collect and who handles it.
How We Handle Your Photos
From upload to deletion, in four steps.
- 1
Upload
You upload your photos over an encrypted HTTPS connection.
- 2
AI processing
Photos are processed by our AI provider to create a temporary model and generate your images.
- 3
Delivery
Your generated images appear in your account for you to review and download.
- 4
Deletion
Training data and temporary models are deleted within 30 days of order completion. You can delete generated images or request account deletion yourself.
Infrastructure
Standard protections, built on managed cloud services.
Managed cloud hosting
TailorPic runs on established cloud platforms rather than self-managed servers. Our sub-processors and what they do are listed publicly.
Encryption in transit
Traffic between your browser and TailorPic uses HTTPS (TLS).
Encrypted storage at rest
Data is stored with managed cloud providers that encrypt stored data at rest.
Payments handled by Stripe
Card payments are processed by Stripe. We do not store your card details.
See the full list of providers on our sub-processors page.
Privacy by Design
Commitments that shape how we build and operate TailorPic.
We do not sell your data
We do not sell your personal information or your photos to third parties.
No general-purpose model training
We do not use your photos to train general-purpose AI models. Your photos are used to generate your requested outputs. If this ever changes, it would require your consent.
GDPR-aware practices
We aim to honor requests for access, correction and deletion of personal data, and we offer a Data Processing Agreement for businesses.
We do not currently claim SOC 2, ISO 27001, HIPAA or any other formal certification. No method of transmission or storage is perfectly secure, so we describe our practices rather than promise absolutes.
Security Questions
Are my photos used to train AI models?
Your photos are used to build a temporary model that generates your own headshots. We do not use them to train general-purpose AI models, and the training data and temporary models are deleted within 30 days of order completion.
Who can access my photos?
Your photos are available to you through your account. They are also handled by the service providers needed to run TailorPic, such as hosting, storage and AI processing. These are listed on our sub-processors page.
How do I delete my data?
You can delete generated images from your account. To delete your personal data and account, email support@tailorpic.com and we will process your request.
Does TailorPic hold a security certification such as SOC 2 or ISO 27001?
No. We do not currently claim any formal security certification or audit report. This page describes the practices we follow, and we will not list a certification here unless we hold it.
Do you store my payment details?
No. Payments are processed by Stripe, and card details are not stored on TailorPic servers.