Privacy
Sinovo processes photographs of your face. That is sensitive data, so this page says plainly what we collect, why, who else sees it, and how to get rid of it.
What we collect
The photos and video frames you upload. Video is decoded in your browser and never sent to us; only the still frames you keep are uploaded.
What you tell us in the questionnaire: the app you are optimising for, your age, gender, who you want to attract, your goal, optionally your city and free-text notes.
Your email address, collected at payment, used to send your results and your receipt.
A random session identifier stored in a cookie, a truncated one-way hash of your IP address, and your browser user agent. We use these to tie your uploads to your results and to spot abuse. We do not store your raw IP address.
Photos and EXIF
Every image is re-encoded in your browser before upload. This strips EXIF metadata, including GPS coordinates. We never receive the location where a photo was taken.
Uploaded and generated images are stored in private buckets. They are never publicly addressable. Your browser only ever receives short-lived signed links.
Who else processes your data
Anthropic (Claude) receives your photos and questionnaire answers to produce the audit and write your bios. Anthropic does not train models on API inputs.
fal.ai receives your photos to retouch them and, if you buy the AI Photoshoot, to train a model on your face and generate new images.
Stripe handles payment. We never see or store your card details.
Supabase hosts the database and file storage. Resend delivers the results email.
We do not sell your data, and we do not use your photos to advertise Sinovo or to train anything of our own.
The face model
The AI Photoshoot trains a small model, called a LoRA, that encodes your likeness. It exists only to generate your own photos. It is not reused for anyone else, and it is deleted when you delete your data.
How long we keep things
Uploads, generated images and audits are deleted 30 days after your last activity.
Order records are kept for as long as accounting law requires.
You can delete everything immediately at any time using the link in the footer. That is irreversible.
Your rights
Under the GDPR you can ask for access, correction, deletion, or a copy of your data, and you can object to processing. Write to contact@sinovo.fr and we will answer within 30 days.
You can also complain to your national data protection authority. In France that is the CNIL.
Legal basis
We process your photos on the basis of your explicit consent, given by the two checkboxes before the audit runs. You can withdraw it at any time by deleting your data.
We process order and payment data to perform the contract you entered into when you paid.