Privacy Policy
Last updated: 27 March 2026
The Crafted Persona ("we," "us," "our") is committed to protecting your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) and applicable data protection laws. This policy explains how we collect, use, store, and delete your data.
1. Information We Collect
We collect only what is necessary to deliver your professional photoshoot:
- Contact information: Name and email address (provided at checkout)
- Selfie photographs: 6-20 images you upload for AI processing
- Body type selection: Visual silhouette choice (slim, medium, or broad) - no body metrics are stored
- Payment information: Processed securely by PayFast or PayPal. We never see or store your card details.
- Order data: Order ID, tier, generation status, timestamps
We do not collect age, ethnicity, health information, biometric identifiers, or any special personal information as defined by POPIA.
2. How We Use Your Information
- Train a temporary AI model on your face to generate your photoshoot images
- Deliver your completed images via email and download link
- Process payments and refunds
- Send transactional emails (upload instructions, delivery notification, refund confirmation)
- Monitor pipeline failures and send operator alerts (internal only)
We do not use your data for marketing, advertising, profiling, or any purpose beyond fulfilling your order.
3. No-Training Guarantee
Your selfies and generated images are never used to train general AI models. Each order creates an isolated, temporary AI model that is used solely for your photoshoot. Your images are not shared with, sold to, or accessed by any third party for training purposes.
4. Data Retention & Automatic Deletion
- Uploaded selfies: Automatically deleted 7 days after delivery
- Generated images: Download links expire after 7 days. Images deleted from storage within 30 days of delivery.
- Temporary AI model: Deleted after image generation is complete
- Order records: Email, name, and order metadata retained for 12 months for refund/support purposes, then deleted
- Payment records: Retained as required by financial regulations (minimum 5 years)
5. Data Storage & Security
- All data transmitted over TLS (HTTPS)
- Images stored in encrypted cloud storage (Cloudflare R2) with pre-signed, time-limited access URLs
- No public URLs to your images exist - all access requires a signed token
- Database access restricted to the application server
6. Third-Party Service Providers
We use the following services to operate The Crafted Persona. Each processes data solely on our behalf:
- fal.ai: AI model training and image generation (images processed temporarily, not retained)
- Anthropic (Claude): Prompt generation and image quality scoring (no image storage)
- Cloudflare R2: Secure image storage
- PayFast / PayPal: Payment processing
- Resend: Transactional email delivery
7. Your Rights Under POPIA
You have the right to:
- Access: Request a copy of all personal information we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request immediate deletion of all your data (selfies, generated images, order records)
- Object: Object to processing of your personal information
- Data portability: Request your data in a portable format (ZIP download)
To exercise any of these rights, email privacy@thecraftedpersona.com. We will respond within 5 business days.
8. Children
The Crafted Persona is intended for professionals aged 18 and over. We do not knowingly process data from anyone under 18.
9. Changes to This Policy
We may update this policy as our services evolve. Material changes will be communicated via email to existing customers. The "Last updated" date at the top reflects the most recent revision.
10. Contact
Information Officer: Mali
Email: privacy@thecraftedpersona.com
Support: support@thecraftedpersona.com
Website: thecraftedpersona.com
Back to Home
Terms of Service